Product by Marimo-team

    Marimo

    4 known vulnerabilities in Marimo (Marimo-team), 1 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Marimo (Marimo-team)
    CriticalCVE-2026-39987

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    In CISA KEV

    		9.8
    HighCVE-2026-75149

    marimo < 0.23.15 Code Injection via MCP Server Configuration

    		8.8
    HighCVE-2026-67618

    marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata

    		6.5
    MediumCVE-2026-54386

    marimo < 0.23.9 XSS via file Query Parameter in assets.py

    		6.1

    News

    All products by Marimo-team