CVE-2026-39987

creationtimestamp| type| source ---|---|--- 2026-04-08 04:00:00+00:00| published-proof-of-concept| https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc 2026-04-09 04:00:00+00:00| exploited|...

PT-2026-31594

Name of the Vulnerable Software and Affected Versions Marimo versions prior to 0.23.0 Description A pre-authentication remote code execution issue exists in the reactive Python notebook framework. The terminal WebSocket endpoint "/terminal/ws" lacks authentication validation, allowing an...