-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| django | pip | < 1.3.2 | 1.3.2 |
| Django | pip | >= 1.4, < 1.4.1 | 1.4.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from two key components: 1) get_image_dimensions() in images.py used a fixed chunk size, causing resource exhaustion (evidenced by the patch doubling chunk_size). 2) ImageField's validation logic in forms/fields.py fully decompressed images (described in CVE text). While the exact validation method name isn't explicit in provided data, the CVE directly implicates the ImageField class, and the security advisory explicitly mentions the shift to Image.verify() to avoid decompression.
PythonPythonKEV Misses 88% of Exploited CVEs- Get the report