Vendor

    Marimo-team

    4 known vulnerabilities in products by Marimo-team, 1 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Marimo-team
    CriticalCVE-2026-39987

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    In CISA KEV

    		9.8
    HighCVE-2026-75149

    marimo < 0.23.15 Code Injection via MCP Server Configuration

    		8.8
    HighCVE-2026-67618

    marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata

    		6.5
    MediumCVE-2026-54386

    marimo < 0.23.9 XSS via file Query Parameter in assets.py

    		6.1

    News

    Products

    Products by Marimo-team
    Marimo41