-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from using AES in ECB mode at lines 192 and 270 in config.py, as explicitly referenced in GitHub Issue #1131. ECB mode is cryptographically insecure as it produces identical ciphertext for identical plaintext blocks. The functions handling encryption/decryption of configuration data using AES.MODE_ECB directly enable this vulnerability through their choice of encryption mode, matching CWE-326's description of inadequate encryption strength.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| mycli | pip | <= 1.27.0 |
PythonPythonOngoing coverage of React2Shell