A missing comma in Mercury's blocklist allowed attackers to access Jupyter terminals. Version 3.2.4 patches the critical vulnerability that enabled remote code execution.
The Python framework patched a critical vulnerability allowing anonymous users to execute arbitrary code on servers running default tokenless configurations.