CVE-2026-67618 | marimo-team marimo up to 0.23.14 PEP-723 Metadata sanitize_pyproject_dict injection (EUVD-2026-52702)

A vulnerability described as problematic has been identified in marimo-team marimo up to 0.23.14. This affects the function sanitize_pyproject_dict of the component PEP-723 Metadata Handler. Such manipulation leads to injection.

This vulnerability is listed as CVE-2026-67618. The attack must be carried out locally. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More