MA
Vendor
marimo-team
4
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75149 | MA marimo marimo-team | 8.8 | Aug 19 | marimo < 0.23.15 Code Injection via MCP Server Configuration |
| CVE-2026-67618 | MA marimo marimo-team | 6.5 | Aug 4 | marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata |
| CVE-2026-54386 | MA marimo marimo-team | 6.1 | Jun 17 | marimo < 0.23.9 XSS via file Query Parameter in assets.py |
| CVE-2026-39987 In wildKEV | MA marimo marimo-team | 9.8 | Apr 9 | marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass |