Search
Find a vulnerability
Search criteria
6 vulnerabilities found for mercury by mljar
CVE-2026-111059 (GCVE-0-2026-111059)
Vulnerability from nvd – Published: 2026-10-19 16:11 – Updated: 2026-10-20 16:11
VLAI
EPSS
VEX
Title
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
Summary
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts attacker-controlled Markdown to HTML without sanitizing raw HTML before assigning it to an ipywidgets.HTML sink. Event-handler attributes and other active HTML can therefore reach the DOM and execute when another user views the application. This issue is fixed in version 3.2.11.
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 15:10 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/mljar/mercury/security/advisor… | x_refsource_CONFIRM |
| https://github.com/mljar/mercury/commit/c798a8592… | x_refsource_MISC |
| https://github.com/mljar/mercury/releases/tag/v3.2.11 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111059",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T15:10:08.190617Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T16:11:40.067Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "mercury",
"vendor": "mljar",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.2.11"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts attacker-controlled Markdown to HTML without sanitizing raw HTML before assigning it to an ipywidgets.HTML sink. Event-handler attributes and other active HTML can therefore reach the DOM and execute when another user views the application. This issue is fixed in version 3.2.11."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-116",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:11:29.745Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq"
},
{
"name": "https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b"
},
{
"name": "https://github.com/mljar/mercury/releases/tag/v3.2.11",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/releases/tag/v3.2.11"
}
],
"source": {
"advisory": "GHSA-2658-85cv-9wwq",
"discovery": "UNKNOWN"
},
"title": "Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-111059",
"datePublished": "2026-10-19T16:11:29.745Z",
"dateReserved": "2026-10-15T12:47:13.664Z",
"dateUpdated": "2026-10-20T16:11:40.067Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111058 (GCVE-0-2026-111058)
Vulnerability from nvd – Published: 2026-10-19 16:06 – Updated: 2026-10-19 17:06
VLAI
EPSS
VEX
Title
Mercury: Unauthenticated Remote Code Execution via /api/kernels
Summary
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/kernels, and the websocket wrapper previously tracked idle activity without authorizing executable messages. This issue is fixed in version 3.2.6.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 17:05 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/mljar/mercury/security/advisor… | x_refsource_CONFIRM |
| https://github.com/mljar/mercury/commit/73a40ceb0… | x_refsource_MISC |
| https://github.com/mljar/mercury/releases/tag/3.2.6 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111058",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T17:05:16.440516Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T17:06:53.899Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "mercury",
"vendor": "mljar",
"versions": [
{
"status": "affected",
"version": "\u003c 3.2.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/kernels, and the websocket wrapper previously tracked idle activity without authorizing executable messages. This issue is fixed in version 3.2.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:06:22.646Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq"
},
{
"name": "https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1"
},
{
"name": "https://github.com/mljar/mercury/releases/tag/3.2.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/releases/tag/3.2.6"
}
],
"source": {
"advisory": "GHSA-rv4m-xm3f-3ccq",
"discovery": "UNKNOWN"
},
"title": "Mercury: Unauthenticated Remote Code Execution via /api/kernels"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-111058",
"datePublished": "2026-10-19T16:06:22.646Z",
"dateReserved": "2026-10-15T12:47:13.664Z",
"dateUpdated": "2026-10-19T17:06:53.899Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111057 (GCVE-0-2026-111057)
Vulnerability from nvd – Published: 2026-10-19 16:04 – Updated: 2026-10-19 16:04
VLAI
EPSS
VEX
Title
Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
Summary
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server's terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4.
Severity
10 (Critical)
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/mljar/mercury/security/advisor… | x_refsource_CONFIRM |
| https://github.com/mljar/mercury/commit/8c4671290… | x_refsource_MISC |
| https://github.com/mljar/mercury/releases/tag/v3.2.4 | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "mercury",
"vendor": "mljar",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.2.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server\u0027s terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-185",
"description": "CWE-185: Incorrect Regular Expression",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:04:07.065Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm"
},
{
"name": "https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f"
},
{
"name": "https://github.com/mljar/mercury/releases/tag/v3.2.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/releases/tag/v3.2.4"
}
],
"source": {
"advisory": "GHSA-f8c7-rwf9-fmgm",
"discovery": "UNKNOWN"
},
"title": "Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-111057",
"datePublished": "2026-10-19T16:04:07.065Z",
"dateReserved": "2026-10-15T12:47:13.664Z",
"dateUpdated": "2026-10-19T16:04:07.065Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111059 (GCVE-0-2026-111059)
Vulnerability from cvelistv5 – Published: 2026-10-19 16:11 – Updated: 2026-10-20 16:11
VLAI
EPSS
VEX
Title
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
Summary
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts attacker-controlled Markdown to HTML without sanitizing raw HTML before assigning it to an ipywidgets.HTML sink. Event-handler attributes and other active HTML can therefore reach the DOM and execute when another user views the application. This issue is fixed in version 3.2.11.
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 15:10 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/mljar/mercury/security/advisor… | x_refsource_CONFIRM |
| https://github.com/mljar/mercury/commit/c798a8592… | x_refsource_MISC |
| https://github.com/mljar/mercury/releases/tag/v3.2.11 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111059",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T15:10:08.190617Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T16:11:40.067Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "mercury",
"vendor": "mljar",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.2.11"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts attacker-controlled Markdown to HTML without sanitizing raw HTML before assigning it to an ipywidgets.HTML sink. Event-handler attributes and other active HTML can therefore reach the DOM and execute when another user views the application. This issue is fixed in version 3.2.11."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-116",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:11:29.745Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq"
},
{
"name": "https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b"
},
{
"name": "https://github.com/mljar/mercury/releases/tag/v3.2.11",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/releases/tag/v3.2.11"
}
],
"source": {
"advisory": "GHSA-2658-85cv-9wwq",
"discovery": "UNKNOWN"
},
"title": "Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-111059",
"datePublished": "2026-10-19T16:11:29.745Z",
"dateReserved": "2026-10-15T12:47:13.664Z",
"dateUpdated": "2026-10-20T16:11:40.067Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111058 (GCVE-0-2026-111058)
Vulnerability from cvelistv5 – Published: 2026-10-19 16:06 – Updated: 2026-10-19 17:06
VLAI
EPSS
VEX
Title
Mercury: Unauthenticated Remote Code Execution via /api/kernels
Summary
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/kernels, and the websocket wrapper previously tracked idle activity without authorizing executable messages. This issue is fixed in version 3.2.6.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 17:05 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/mljar/mercury/security/advisor… | x_refsource_CONFIRM |
| https://github.com/mljar/mercury/commit/73a40ceb0… | x_refsource_MISC |
| https://github.com/mljar/mercury/releases/tag/3.2.6 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111058",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T17:05:16.440516Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T17:06:53.899Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "mercury",
"vendor": "mljar",
"versions": [
{
"status": "affected",
"version": "\u003c 3.2.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/kernels, and the websocket wrapper previously tracked idle activity without authorizing executable messages. This issue is fixed in version 3.2.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:06:22.646Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq"
},
{
"name": "https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1"
},
{
"name": "https://github.com/mljar/mercury/releases/tag/3.2.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/releases/tag/3.2.6"
}
],
"source": {
"advisory": "GHSA-rv4m-xm3f-3ccq",
"discovery": "UNKNOWN"
},
"title": "Mercury: Unauthenticated Remote Code Execution via /api/kernels"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-111058",
"datePublished": "2026-10-19T16:06:22.646Z",
"dateReserved": "2026-10-15T12:47:13.664Z",
"dateUpdated": "2026-10-19T17:06:53.899Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111057 (GCVE-0-2026-111057)
Vulnerability from cvelistv5 – Published: 2026-10-19 16:04 – Updated: 2026-10-19 16:04
VLAI
EPSS
VEX
Title
Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
Summary
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server's terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4.
Severity
10 (Critical)
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/mljar/mercury/security/advisor… | x_refsource_CONFIRM |
| https://github.com/mljar/mercury/commit/8c4671290… | x_refsource_MISC |
| https://github.com/mljar/mercury/releases/tag/v3.2.4 | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "mercury",
"vendor": "mljar",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.2.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server\u0027s terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-185",
"description": "CWE-185: Incorrect Regular Expression",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:04:07.065Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm"
},
{
"name": "https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f"
},
{
"name": "https://github.com/mljar/mercury/releases/tag/v3.2.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mljar/mercury/releases/tag/v3.2.4"
}
],
"source": {
"advisory": "GHSA-f8c7-rwf9-fmgm",
"discovery": "UNKNOWN"
},
"title": "Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-111057",
"datePublished": "2026-10-19T16:04:07.065Z",
"dateReserved": "2026-10-15T12:47:13.664Z",
"dateUpdated": "2026-10-19T16:04:07.065Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}