#1140449 trixie-pu: package nbconvert/7.16.6-1+deb13u1

Package:
release.debian.org
Source:
release.debian.org
Submitter:
Adrian Bunk
Date:
2026-06-20 16:43:02 UTC
Severity:
normal
Tags:
#1140449#5
Date:
2026-06-20 16:39:59 UTC
From:
To:
  * CVE-2026-39377: Arbitrary File Write via Path Traversal in
    Cell Attachment Filenames (Closes: #1134889)
  * CVE-2026-39378: Arbitrary File Read via Path Traversal in
    HTMLExporter Image Embedding (Closes: #1134890)