-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moin | pip | < 1.9.3 | 1.9.3 |
Miggo AIRoot Cause AnalysisThe vulnerability explicitly references parser/text_rst.py and the refuri attribute handling. The root cause is improper validation of URL schemes in reference links. While the exact function name isn't specified in available documentation, rst parsers typically process references through dedicated methods (e.g., visit_reference in docutils). The SecurityFixes page confirms the mitigation involved removing 'javascript:' URL support, directly implicating the refuri processing logic in this file.
Ongoing coverage of React2Shell