aissemble-notebook-exporter (1.0.0.dev1719419214), click-clack (>=0.1.0, <=0.2.1) +7 more potentially affected by unknown CVE via marimo (>=0.3.12, <=0.11.31)

marimo PYPI version =0.3.12, =0.1.0, =1.2.7rc0, =2024.10.29, =0.1.0, =0.1.14, =0.1.1.dev1736307293, =0.1.1.dev1742453945 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MARIMO-12671196...

Arbitrary Code Execution

Overview marimo is an A library for making reactive notebooks and apps Affected versions of this package are vulnerable to Arbitrary Code Execution due to the dynamic loading of notebooks as modules. An attacker can execute malicious code in notebooks during the loading process, potentially...