-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-superset | pip | <= 0.38.0 | 0.38.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper input sanitization in the Markdown rendering pipeline. While exact function names aren't provided in available resources, the pattern matches: 1) The attack requires Markdown-to-HTML conversion 2) SVG script execution indicates failure to strip dangerous HTML elements 3) The CWE-79 classification confirms this is a web generation sanitization failure. The core Markdown processing function handling dashboard components would be the logical injection point for this payload.
PythonPythonOngoing coverage of React2Shell