영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2026-66885 | Livebook Teams identity callback lacks state binding, allowing login CSRF | ≥ 0.15.0 < 0.18.7 ≥ 0.19.0 < 0.19.9 ≥ 0.15.0-cuda12 < 0.18.7-cuda12 | 6.8 | — | 2026-08-06 | |
| CVE-2026-66298 | JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts | ≥ 0.5.0 < 0.18.7 ≥ 0.19.0 < 0.19.9 ≥ 0.5.0-cuda12 < 0.18.7-cuda12 | 8.6 | — | 2026-08-06 | |
| CVE-2026-66297 | Unescaped deployment environment variables in generated setup commands | ≥ 0.13.0 < 0.18.7 ≥ 0.19.0 < 0.19.9 ≥ 0.13.0-cuda12 < 0.18.7-cuda12 | 5.0 | — | 2026-08-06 | |
| CVE-2026-66881 | Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download | ≥ 0.11.0 < 0.18.7 ≥ 0.19.0 < 0.19.9 ≥ 0.11.0-cuda12 < 0.18.7-cuda12 | 7.0 | — | 2026-08-06 | |
| CVE-2026-68746 | Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated a... | ≥ 0.19.7 < 0.19.9 ≥ 0.19.7-cuda12 < 0.19.9-cuda12 ≥ fc2c87c6b0276705281842acbe17142d1ac4d555 < 2d3a2c710c880abd24a2bc888d3cf5239d98cf72 | 7.7 | — | 2026-08-06 | |
| CVE-2023-35174 | Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows | * | 8.6 | — | 2023-06-22 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).