Vulnerabilities in marimo-team
4 resultsCVE-2026-39987CRITICALmarimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication BypassEPSS 99.7%KEVCVE-2026-75149HIGHmarimo < 0.23.15 Code Injection via MCP Server ConfigurationEPSS 1.0%CVE-2026-67618HIGHmarimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 MetadataEPSS 0.3%CVE-2026-54386MEDIUMmarimo < 0.23.9 XSS via file Query Parameter in assets.pyEPSS 0.2%