-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| sosreport | pip | < 3.3 | 3.3 |
Miggo AIRoot Cause AnalysisThe GitHub patch shows the vulnerability was fixed by adding umask manipulation in the final_work function. The commit explicitly adds os.umask(0o077) and restores the original umask in a finally block. This indicates the absence of proper umask handling in this function was the root cause. The CVE description directly attributes the issue to weak archive permissions, which aligns with the umask-related code changes in this function.
PythonPythonOngoing coverage of React2Shell