-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| reportlab | pip | < 3.5.31 | 3.5.31 |
Miggo AIRoot Cause AnalysisThe vulnerability stems directly from unsafe evaluation of user-controlled input in the start_unichar method of paraparser.py. The CVE description explicitly names this function as the vulnerable component, and the patch notes confirm paraparser modifications in the first patched version (3.5.31). The function's role in processing XML unichar elements with executable code attributes makes it the primary vulnerable entry point visible in runtime traces.