PyPI/marimo: medium
marimo vulnerable to proxy abuse of /mpl/{port}/
Action: Upgrade marimo to 0.16.4 or later.
pip install marimo==0.16.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.20 | 0.16.4 | - |
Fixed versions
| 0.16.4 |
Sources
- osv: GHSA-xjv7-6w92-42r7
- https://github.com/marimo-team/marimo/security/advisories/GHSA-xjv7-6w92-42r7
- https://github.com/marimo-team/marimo/commit/0312706d5e594acdb405209b2c8d87c98f46b22b
- https://github.com/marimo-team/marimo
- https://github.com/marimo-team/marimo/releases/tag/0.16.4
- https://marimo-team.notion.site/cve-proxy-without-authentication
published · modified · JSON