-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Django | pip | >= 1.8a1, < 1.8.2 | 1.8.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems directly from the session.flush() implementation in the cached_db backend. The commit diff shows the critical line change from setting _session_key to '' (vulnerable) to None (fixed). This incorrect key handling during session flushing allowed cookie collisions. The security advisory explicitly identifies this function as the root cause, and the patch confirms the fix occurs in this specific method.
PythonPythonOngoing coverage of React2Shell