mercury vulnerabilities

2 known vulnerabilities in mercury from Mljar. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  mercury: Missing Authorization

  CVE-2026-111058Oct 19, 2026Mljar

  Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The e

• 10.0 Critical severity

  mercury: Incorrect Regular Expression

  CVE-2026-111057Oct 19, 2026Mljar

  Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefo