Mljar vulnerabilities
We track 3 vulnerabilities in Mljar products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.
Latest Mljar vulnerabilities
- 9.8 Critical severity
mercury: Missing Authorization
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The e
- 10.0 Critical severity
mercury: Incorrect Regular Expression
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefo
- 9.8 Critical severity
PlotAI: Improper Neutralization of Special Elements used in a Command
A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requir