The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Marimo CVE-2026-39987 exploited within 10 hours of disclosure, enabling unauthenticated RCE and credential theft, emphasizing urgent patching needs.

セキュリティニュースアラート： Node.jsにサービス停止や権限回避の脆弱性　直ちに最新版に更新を Node.jsは、全サポート系統を対象に複数の脆弱性を修正するセキュリティアップデートを公開した。重要度が高いVMモジュールのメモリ初期化不備や権限回避、HTTP/2の停止問題などへの対応が含まれる。利用者は速やかに最新版への更新が求められる。（2026/1/15） ...

Marimo is an integrated development environment for Python that combines code, results, visualizations, and documentation.

Over 1,000 exposed ComfyUI instances exploited via unauthenticated code execution, enabling Monero mining and botnet expansion.

前回、Dropbox ...

They can even replace classic Linux tools and let you play old PC games.

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

All in all, your first RESTful API in Python is about piecing together clear endpoints, matching them with the right HTTP ...

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...