Skip to content
Mmarimo-team
Products
| Product | CVEs | Exploited | Latest |
|---|
| marimo | 4 | 1 | Aug 19, 2026 |
Exploited and recent CVEs
-
CVE-2026-39987
Critical 9.3 Exploited
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
99.7%
-
CVE-2026-75149
High 8.8
marimo < 0.23.15 Code Injection via MCP Server Configuration
1.0%
-
CVE-2026-67618
Medium 6.5
marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata
0.3%
-
CVE-2026-54386
Medium 6.1
marimo < 0.23.9 XSS via file Query Parameter in assets.py
0.2%