{"id":"DEBIAN-CVE-2025-53000","details":"The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a Windows batch script, capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Windows platform from this directory, the `inkscape.bat` file is run unexpectedly. As of time of publication, no known patches exist.","modified":"2025-12-27T19:45:46.348260Z","published":"2025-12-17T21:16:14.473Z","withdrawn":"2025-12-27T19:45:46.348260Z","upstream":["CVE-2025-53000"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-53000"}],"affected":[{"package":{"name":"nbconvert","ecosystem":"Debian:11","purl":"pkg:deb/debian/nbconvert?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.1-3","5.6.1-3+deb11u1","6.1.0-1","6.3.0-1","6.4.0-1","6.4.4-1","6.4.4-2","6.5.1-1","6.5.3-1","6.5.3-1.1","6.5.3-2","6.5.3-3","6.5.3-4","6.5.3-5","7.16.4-1","7.16.4-2","7.16.5-1","7.16.6-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-53000.json"}},{"package":{"name":"nbconvert","ecosystem":"Debian:12","purl":"pkg:deb/debian/nbconvert?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.3-3","6.5.3-4","6.5.3-5","7.16.4-1","7.16.4-2","7.16.5-1","7.16.6-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-53000.json"}},{"package":{"name":"nbconvert","ecosystem":"Debian:13","purl":"pkg:deb/debian/nbconvert?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.16.6-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-53000.json"}},{"package":{"name":"nbconvert","ecosystem":"Debian:14","purl":"pkg:deb/debian/nbconvert?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.16.6-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-53000.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}]}