marimo-team marimo

• CVE-2026-39987 Critical 9.3 Exploited marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass 99.7%
• CVE-2026-75149 High 8.8 marimo < 0.23.15 Code Injection via MCP Server Configuration 1.0%
• CVE-2026-67618 Medium 6.5 marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata 0.3%
• CVE-2026-54386 Medium 6.1 marimo < 0.23.9 XSS via file Query Parameter in assets.py 0.2%