p PatchFirst

CVE-2025-53000

CVE-2025-53000 · nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a Windows batch script, capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Windows platform from this directory, the `inkscape.bat` file is run unexpectedly. This issue has been patched in version 7.17.0.

CVSS 8.5 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • nbconvert

    Versions
    • < 7.17.0: Affected

    No fix published

  • nbconvert PyPI

    Versions
    • 0.0.0
    • 4.0.0
    • 4.1.0
    • 4.2.0
    • 4.3.0
    • 5.0.0
    • 5.0.0b1
    • 5.1.0
    • 5.1.1
    • 5.2.1
    • 5.3.0
    • 5.3.1
    • 5.4.0
    • 5.4.1
    • 5.4.1.dev0
    • 5.5.0
    • 5.6.0
    • 5.6.1
    • 6.0.0
    • 6.0.0a0
    • 6.0.0a1
    • 6.0.0a2
    • 6.0.0a3
    • 6.0.0a4
    • 6.0.0a5
    • 6.0.0a6
    • 6.0.0b7
    • 6.0.0rc0
    • 6.0.1
    • 6.0.2
    • 6.0.3
    • 6.0.4
    • 6.0.5
    • 6.0.6
    • 6.0.7
    • 6.1.0
    • 6.1.0rc0
    • 6.1.1b0
    • 6.2.0
    • 6.2.0rc0
    • 6.2.0rc1
    • 6.2.0rc2
    • 6.3.0
    • 6.3.0b0
    • 6.4.0
    • 6.4.1
    • 6.4.2
    • 6.4.3
    • 6.4.4
    • 6.4.5
    • 6.5.0
    • 6.5.1
    • 6.5.2
    • 6.5.3
    • 6.5.4
    • 7.0.0
    • 7.0.0rc0
    • 7.0.0rc1
    • 7.0.0rc2
    • 7.0.0rc3
    • 7.1.0
    • 7.10.0
    • 7.11.0
    • 7.12.0
    • 7.13.0
    • 7.13.1
    • 7.14.0
    • 7.14.1
    • 7.14.2
    • 7.15.0
    • 7.16.0
    • 7.16.1
    • 7.16.2
    • 7.16.3
    • 7.16.4
    • 7.16.5
    • 7.16.6
    • 7.2.0
    • 7.2.1
    • 7.2.10
    • 7.2.2
    • 7.2.3
    • 7.2.4
    • 7.2.5
    • 7.2.6
    • 7.2.7
    • 7.2.8
    • 7.2.9
    • 7.3.0
    • 7.3.1
    • 7.4.0
    • 7.5.0
    • 7.6.0
    • 7.7.0
    • 7.7.1
    • 7.7.2
    • 7.7.3
    • 7.7.4
    • 7.8.0
    • 7.9.0
    • 7.9.1
    • 7.9.2
    Affected ranges
    • ECOSYSTEM: < 7.17.0

    Update to 7.17.0

  • nbconvert Ubuntu:18.04:LTS

    Versions
    • 4.2.0-4
    • 5.3.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nbconvert Ubuntu:20.04:LTS

    Versions
    • 5.4-2ubuntu2
    • 5.6.0-1
    • 5.6.0-2
    • 5.6.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nbconvert Ubuntu:22.04:LTS

    Versions
    • 5.6.1-3
    • 6.1.0-1
    • 6.3.0-1
    • 6.4.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nbconvert Ubuntu:24.04:LTS

    Versions
    • 6.5.3-4
    • 6.5.3-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nbconvert Ubuntu:25.10

    Versions
    • 7.16.6-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nbconvert Ubuntu:26.10

    Versions
    • 7.17.0-1
    • 7.17.1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nbconvert Ubuntu:26.04:LTS

    Versions
    • 7.16.6-1
    • 7.17.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →