mercury vulnerabilities (PyPI)

3 vulnerabilities.

• mercury PyPI Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML CVE-2026-111059 Fix available 6.1 MediumOctober 19, 2026
• mercury PyPI Mercury: Unauthenticated Remote Code Execution via /api/kernels CVE-2026-111058 Public exploitFix available 9.8 CriticalOctober 19, 2026
• mercury PyPI Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass CVE-2026-111057 Fix available 10.0 CriticalOctober 19, 2026