-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nova | pip | < 16.0.4 | 16.0.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the FilterScheduler's resource claiming logic during rebuilds. The patch adds a check using utils.request_is_rebuild() to skip Placement API claims for rebuild-only requests. The original code path in _claim_resources() lacked this guard, allowing repeated resource claims. The commit diff, test removals of 'doubled allocation' assertions, and CVE description all confirm this function's role in the vulnerability.