Threats tagged 'ghsa-v9v8-jp27-55gf'

marimo versions prior to 0.23.15 contain a configuration injection vulnerability that allows malicious notebook authors to exfiltrate operator API keys. This occurs because attacker-controlled base_url values embedded in notebook metadata override operator settings without proper sanitization. When an operator opens a crafted notebook and makes an AI request, the operator's API key is sent to the attacker-controlled endpoint without requiring execution of notebook cells.