Vulnerability	Vulnerable Version
H Insufficient Verification of Data Authenticity marimo is an A library for making reactive notebooks and apps Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via `sanitize_pyproject_dict` in the PEP-723 script metadata handling path. An attacker can exfiltrate an operator’s API key by embedding a malicious `tool.marimo.ai.open_ai.base_url` in a notebook, then waiting for the operator to open the notebook and make an AI request. Notebook inline metadata is merged into session configuration with higher precedence than the operator’s own settings, so the attacker-controlled `base_url` is used for the outbound request while marimo falls back to the operator’s `OPENAI_API_KEY` for authentication. This sends the operator’s key to the attacker’s endpoint without requiring any cell execution. How to fix Insufficient Verification of Data Authenticity? Upgrade `marimo` to version 0.23.15 or higher.	[,0.23.15)

Insufficient Verification of Data Authenticity

marimo is an A library for making reactive notebooks and apps

Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via sanitize_pyproject_dict in the PEP-723 script metadata handling path. An attacker can exfiltrate an operator’s API key by embedding a malicious tool.marimo.ai.open_ai.base_url in a notebook, then waiting for the operator to open the notebook and make an AI request. Notebook inline metadata is merged into session configuration with higher precedence than the operator’s own settings, so the attacker-controlled base_url is used for the outbound request while marimo falls back to the operator’s OPENAI_API_KEY for authentication. This sends the operator’s key to the attacker’s endpoint without requiring any cell execution.

How to fix Insufficient Verification of Data Authenticity?

Upgrade marimo to version 0.23.15 or higher.

[,0.23.15)

Go back to all versions of this package