-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pydash | pip | < 6.0.0 | 6.0.0 |
Miggo AIRoot Cause AnalysisThe vulnerability documentation explicitly names both functions as entry points. The root cause lies in their handling of dotted paths to access internal class attributes (like init.globals). The GitHub commit adds key restrictions in path resolution helpers (_base_get_object/base_set), which these functions utilize. Tests confirm restrictions target dunder method access. While helpers.py contains the patched logic, the exposed vulnerability manifests through the invoke() and invoke_map() API methods that consume attacker-controlled paths.
Ongoing coverage of React2Shell