MEDIUM6.1PyPI
GHSA-8m59-7xv8-735h· CVE-2026-54386, PYSEC-2026-2619marimo contains a reflected cross-site scripting vulnerability in the notebook page
Modified: 7/13/2026
package
PyPI/marimo
pkg:pypi/marimo
CRITICAL9.8PyPI
GHSA-2679-6mx9-h9xc· CVE-2026-39987, PYSEC-2026-407Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
Modified: 6/29/2026
MEDIUMPyPI
GHSA-xjv7-6w92-42r7marimo vulnerable to proxy abuse of /mpl/{port}/
Modified: 9/10/2026
MEDIUM6.1PyPI
PYSEC-2026-2619· CVE-2026-54386, GHSA-8m59-7xv8-735hmarimo contains a reflected cross-site scripting vulnerability in the notebook page
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-407· CVE-2026-39987, GHSA-2679-6mx9-h9xcMarimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
Modified: 7/1/2026