Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record. The CNA record says the command can run as a local subprocess when the notebook is opened in edit mode. The vulnerability, tracked

#infosec #threatintel #notebook #edit #execute #flaw #marimo

Article URL: https://squaresight.io/en/sketch/index.html Comments URL: https://news.ycombinator.com/item?id=49432621 Points: 1 # Comments: 1

#hackernews #showhn #projects #sketch #square #editor #graphics #interface

As the senior climate editor at NPR, when extreme weather impacts us, I often send out guidance to the newsroom to help everyone understand the role of climate change. Here's what I tell them.

#news #npr #us #climate #editor #senior #understand

Shared from Nature Bot.

#science #research #nature #assessing #era #students #bot #editor