-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nova | pip | < 12.0.0a0 | 12.0.0a0 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from three key points: 1) EC2 API's _rule_dict_last_step and 2) OS API's _rule_args_to_dict functions stored protocol values without converting to lowercase, and 3) firewall.py's instance_rules used these values without normalization. The patches explicitly add .lower() conversions in all three locations, confirming these were the vulnerable points. The functions directly handled protocol validation/storage/application, and their case-sensitive handling matched the vulnerability description.
Ongoing coverage of React2Shell