Skip to content
OpenAdvisories

Vendor

livebook-dev

6 known vulnerabilities.

Products

livebook 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-66885

    Livebook Teams identity callback lacks state binding, allowing login CSRF

    Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. When Livebook is configured to use Livebook Teams for identity, Livebook.Z…

    livebook-dev livebook livebook Hex
  • Medium 5.0
    CVE-2026-66297

    Unescaped deployment environment variables in generated setup commands

    Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instr…

    livebook-dev livebook livebook Hex