CVE-2026-54386
2 advisories.
PyPI/marimo CVE-2026-54386: medium 6.1, EPSS 0.40%
marimo contains a reflected cross-site scripting vulnerability in the notebook page
Action: Upgrade marimo to 0.23.9 or later.
pip install marimo==0.23.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.9 | - |
Fixed versions
| 0.23.9 |
Sources
- osv: GHSA-8m59-7xv8-735h
- https://nvd.nist.gov/vuln/detail/CVE-2026-54386
- https://github.com/marimo-team/marimo/pull/9789
- https://github.com/marimo-team/marimo/commit/fdd55c8cf6260ae23bb411dc9d9269def5cf75d6
- https://github.com/marimo-team/marimo
- https://github.com/marimo-team/marimo/releases/tag/0.23.9
- https://www.vulncheck.com/advisories/marimo-xss-via-file-query-parameter-in-assets-py
CVE-2026-54386 · published · modified · JSON
PyPI/marimo CVE-2026-54386: medium 6.1, EPSS 0.40%
marimo contains a reflected cross-site scripting vulnerability in the notebook page
Action: Upgrade marimo to 0.23.9 or later.
pip install marimo==0.23.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.9 | - |
Fixed versions
| 0.23.9 |
Sources
- osv: PYSEC-2026-2619
- https://nvd.nist.gov/vuln/detail/CVE-2026-54386
- https://github.com/marimo-team/marimo/pull/9789
- https://github.com/marimo-team/marimo/commit/fdd55c8cf6260ae23bb411dc9d9269def5cf75d6
- https://github.com/marimo-team/marimo
- https://github.com/marimo-team/marimo/releases/tag/0.23.9
- https://www.vulncheck.com/advisories/marimo-xss-via-file-query-parameter-in-assets-py
- https://pypi.org/project/marimo
- https://github.com/advisories/GHSA-8m59-7xv8-735h
CVE-2026-54386 · published · modified · JSON