livebook vulnerabilities (Hex)
6 vulnerabilities.
-
livebookHex Livebook Teams identity callback lacks state binding, allowing login CSRF 6.8 Medium -
livebookHex JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts 8.6 High -
livebookHex Unescaped deployment environment variables in generated setup commands 5.0 Medium -
livebookHex Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download 7.0 High -
livebookHex Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access 7.7 High -
livebookHex Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows 8.6 High