-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ai-flow | pip | <= 0.3.1 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies cloudpickle.loads in workflow_command.py as the affected function. Cloudpickle is known to be unsafe for deserializing untrusted data due to its ability to serialize/deserialize arbitrary Python objects. The combination of: 1) explicit mention in CVE/GHSA descriptions, 2) known risks of cloudpickle, and 3) remote attack vector confirms this as the vulnerable function with high confidence.
A Semantic Attack on Google Gemini - Read the Latest Research