Livebook-dev Livebook vulnerabilities
- livebook Livebook Teams identity callback lacks state binding, allowing login CSRF 6.8 Medium
- livebook JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts 8.6 High
- livebook Unescaped deployment environment variables in generated setup commands 5.0 Medium
- livebook Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download 7.0 High
- livebook Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access 7.7 High
- livebook Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows 8.6 High