MA
Product
marimo
by marimo-team · last CVE Aug 19, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch

Add marimo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39987
In wildKEV
9.8
100%
Apr 9
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
Affected: < 0.23.0
Showing 1