marimo vulnerabilities (PyPI)

3 vulnerabilities.

• marimo PyPI marimo < 0.23.9 XSS via file Query Parameter in assets.py CVE-2026-54386 Fix available 5.1 MediumJune 17, 2026
• marimo PyPI marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass CVE-2026-39987 In KEVPublic exploitFix available EPSS 99.7% 9.3 CriticalApril 8, 2026
• marimo PyPI marimo vulnerable to proxy abuse of /mpl/{port}/ GHSA-xjv7-6w92-42r7 Fix available 6.9 MediumOctober 1, 2025