[ Vendor · 3 CVEs ]
mljar
CVEs affecting mljar published in the last 30 days, plus any mljar CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111059 | 19 Oct 2026 | CVSS 6.1 | Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts… | Fix |
| CVE-2026-111057 | 19 Oct 2026 | CVSS 10.0 | Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in… | Fix |
| CVE-2026-111058 | 19 Oct 2026 | CVSS 9.8 | Mercury: Unauthenticated Remote Code Execution via /api/kernelsMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow… | Fix |