livebook-dev livebook

• CVE-2026-66885 Medium 6.8 Livebook Teams identity callback lacks state binding, allowing login CSRF 0.2%
• CVE-2026-66298 High 8.6 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts 0.3%
• CVE-2026-66297 Medium 5.0 Unescaped deployment environment variables in generated setup commands 2.4%
• CVE-2026-66881 High 7.0 Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download 0.6%
• CVE-2026-68746 High 7.7 Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access 0.8%
• CVE-2023-35174 High 8.6 Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows 1.0%