-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| MindsDB | pip | < 23.7.4.0 | 23.7.4.0 |
Miggo AIRoot Cause AnalysisThe vulnerability was explicitly patched by removing the 'verify=False' parameter from a requests.post call in dremio_handler.py. The commit diff shows this security-sensitive parameter was present in the connect method of DremioHandler prior to the fix. This matches the CVE description about disabled certificate validation, and the file/line modification is clearly identified in the provided vulnerability data.
PythonPythonOngoing coverage of React2Shell