Vulnerabilities

TI-2026-76431 CVE-2026-111059 · GHSA-2658-85cv-9wwq

Mercury mr.Markdown renders untrusted Markdown as unsanitized HTML (XSS)

LOW 27

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00284 Published 2026-10-19 Fixed in 3.2.11 CWE-116

TI-2026-76430 CVE-2026-111058 · GHSA-rv4m-xm3f-3ccq

MEDIUM 49

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00523 Published 2026-10-19 Fixed in 3.2.6 CWE-862

TI-2026-76429 CVE-2026-111057 · GHSA-f8c7-rwf9-fmgm

HIGH 82

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00698 Published 2026-10-19 Fixed in 3.2.4 CWE-185

TI-2025-01287 CVE-2025-1497 · GHSA-2hmp-5wqg-f24h

MEDIUM 50

A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0104 Published 2025-03-10 Fixed in 0.0.7 CWE-94