-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| vantage6 | pip | < 4.0.0 | 4.0.0 |
Miggo AIRoot Cause AnalysisThe core vulnerability stems from numeric resource names enabling ID/name confusion. The patch introduced: 1) A _validate_name helper that rejects numeric names 2) Marshmallow schema validation applied to all resource creation endpoints. The vulnerable functions are those handling user/organization/collaboration creation that previously lacked this validation. The User model's set_password method shows where username validation was strengthened, while the schema files show where resource name validation was systemically added.
KEV Misses 88% of Exploited CVEs- Get the report