-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| codiad/codiad | composer | < 2.8.1 | 2.8.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the saveJSON function's insecure data formatting. The original implementation wrote JSON data as a PHP comment without line breaks (<?php/*|{data}|*/?>). This structure could be misinterpreted by some PHP processors, allowing the JSON payload to be served as plaintext. The patch explicitly adds \r\n line breaks around the JSON data to ensure proper comment parsing. The function's direct role in handling sensitive data storage and the explicit reference in CVE/GHSA advisories confirm its vulnerability.
PHPPHPKEV Misses 88% of Exploited CVEs- Get the report