livebook vulnerabilities and CVEs

Known vulnerabilities affecting livebook, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

5 vulnerabilities tracked.

8.6 Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard… CVE-2026-66298 5 Aug 2026
7.7 Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access… CVE-2026-68746 5 Aug 2026
7.0 Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with… CVE-2026-66881 5 Aug 2026
6.8 Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session… CVE-2026-66885 5 Aug 2026
5.0 Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows… CVE-2026-66297 5 Aug 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that livebook is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here