{"data":{"ecosystem":"pypi","name":"marimo","url":"https://aisecwatch.com/packages/pypi/marimo","latestVersion":"0.25.1","firstReleaseAt":"2023-08-14T19:41:02.079Z","repository":"https://github.com/marimo-team/marimo","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-03-06T04:45:46.993Z","integratedVersion":"0.3.0","sdks":["mcp","pydantic-ai"],"path":[]},"authority":{"profile":["mcp_tools"],"fromDependencies":["pypi:mcp"]},"dependencies":[{"ecosystem":"pypi","name":"mcp","versionSpec":"<3,>=2.0.0","scope":"extra:mcp"},{"ecosystem":"pypi","name":"pydantic-ai-slim","versionSpec":"<3.0.0,>=1.107.0","scope":"extra:recommended"},{"ecosystem":"pypi","name":"marimo-lens","versionSpec":">=0.2.3","scope":"extra:recommended"},{"ecosystem":"pypi","name":"altair","versionSpec":">=5.4.0","scope":"extra:recommended"},{"ecosystem":"pypi","name":"click","versionSpec":"<9,>=8.0","scope":"runtime"},{"ecosystem":"pypi","name":"cryptography","versionSpec":">=42.0.0","scope":"extra:recommended"},{"ecosystem":"pypi","name":"docutils","versionSpec":">=0.16.0","scope":"runtime"},{"ecosystem":"pypi","name":"duckdb","versionSpec":">=1.0.0","scope":"extra:sql"},{"ecosystem":"pypi","name":"httpx2","versionSpec":"<3,>=2.5.0","scope":"extra:mcp"},{"ecosystem":"pypi","name":"itsdangerous","versionSpec":">=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"jedi","versionSpec":"<0.21.0,>=0.18.0","scope":"runtime"},{"ecosystem":"pypi","name":"loro","versionSpec":">=1.10.0","scope":"runtime"},{"ecosystem":"pypi","name":"markdown","versionSpec":"<4,>=3.6","scope":"runtime"},{"ecosystem":"pypi","name":"msgspec","versionSpec":">=0.20.0","scope":"runtime"},{"ecosystem":"pypi","name":"narwhals","versionSpec":">=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"nbformat","versionSpec":">=5.7.0","scope":"extra:recommended"},{"ecosystem":"pypi","name":"opentelemetry-api","versionSpec":"~=1.28.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp-proto-grpc","versionSpec":"~=1.28.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp-proto-http","versionSpec":"~=1.28.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":"~=1.28.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"packaging","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"polars","versionSpec":">=1.9.0","scope":"extra:sql"},{"ecosystem":"pypi","name":"psutil","versionSpec":">=5.0","scope":"runtime"},{"ecosystem":"pypi","name":"pygments","versionSpec":"<3,>=2.19","scope":"runtime"},{"ecosystem":"pypi","name":"pymdown-extensions","versionSpec":"<12,>=10.21.2","scope":"runtime"},{"ecosystem":"pypi","name":"python-lsp-ruff","versionSpec":">=2.0.0","scope":"extra:lsp"},{"ecosystem":"pypi","name":"python-lsp-server","versionSpec":">=1.13.0","scope":"extra:lsp"},{"ecosystem":"pypi","name":"python-multipart","versionSpec":">=0.0.18","scope":"runtime"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":">=6.0.1","scope":"runtime"},{"ecosystem":"pypi","name":"pyzmq","versionSpec":">=27.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"ruff","versionSpec":null,"scope":"extra:recommended"},{"ecosystem":"pypi","name":"sqlglot","versionSpec":">=26.8.0","scope":"extra:sql"},{"ecosystem":"pypi","name":"starlette","versionSpec":">=0.37.2","scope":"runtime"},{"ecosystem":"pypi","name":"tomlkit","versionSpec":">=0.12.0","scope":"runtime"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":">=4.4.0","scope":"runtime"},{"ecosystem":"pypi","name":"uv","versionSpec":">=0.9.21","scope":"extra:sandbox"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":">=0.22.0","scope":"runtime"},{"ecosystem":"pypi","name":"websockets","versionSpec":">=14.2.0","scope":"runtime"}],"advisories":[{"id":"ea5ec13a-298a-468e-920a-453da5030edc","url":"https://aisecwatch.com/issues/ea5ec13a-298a-468e-920a-453da5030edc","cveId":"CVE-2026-39987","title":"CVE-2026-39987: Marimo Remote Code Execution Vulnerability","headline":null,"severity":"critical","publishedAt":"2026-04-23T00:00:00.000Z","affected":["marimo@< 0.23.0 (fixed: 0.23.0)"],"epssScore":0.37865}],"checkedAt":"2026-10-09T22:26:55.839Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}