-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| deluge | pip | >= 0, < 2.1.0 | 2.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from unsanitized torrent metadata being rendered as HTML. The Web UI's JSON API (json_api.py) and template rendering components (torrenthandler.py) are primary candidates based on: 1) The vulnerability manifests in Web UI torrent display 2) Ticket #3459 references Tornado template rendering issues 3) Common XSS patterns in web applications involve improper output encoding in data presentation layers. While exact line numbers aren't available from provided sources, the component structure and vulnerability pattern strongly implicate these core data presentation functions.
PythonPythonOngoing coverage of React2Shell