Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

jupyter/nbconvert

              main @ 78ed308
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Cross-Site Scripting (XSS): 1 prior fix. Scrutinize any change in this area.

nbconvert/filters/markdown_mistune.py: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Attackers can read arbitrary files via crafted notebook image references when HTMLExporter.embed_images=True, bypassing intended base directories. Developers must ensure all file paths undergo strict canonicalization and prefix verification.

Untrusted Search Path: On Windows platforms, resolving external executables like Inkscape can fall back to searching the current working directory, enabling local command injection via malicious batch files. Resolving paths must explicitly ignore the CWD.

Cross-Site Scripting (XSS): HTML sanitization bypasses in generated notebooks allow arbitrary script injection. The sanitization process must explicitly bind and utilize strict configurations (such as passing css_sanitizer to bleach.clean) to enforce secure boundaries.