Python Library marimo < 0.23.0 Pre-Auth RCE (CVE-2026-39987)

Version 1.2 Apr 24, 2026, 4:28 PM CISA reference CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202604241628
Version 1.1 Apr 24, 2026, 12:02 PM New Plugin Feed: 202604241202

* Changelogs are generally available for changes made after Nov 1, 2022