mercury
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML | mercury | PyPI | Medium | Fix reported | |
| Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass | mercury | PyPI | Critical | Fix reported | |
| Mercury: Unauthenticated Remote Code Execution via /api/kernels | mercury | PyPI | Critical | Fix reported |