-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| InvokeAI | pip |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in the /api/v1/images/upload endpoint handled by upload_image. While the exact multipart parsing occurs in framework internals (python-multipart), the entry point for this attack surface is the upload_image function. The advisory directly references this code location (line 29 of images.py), and the function's lack of boundary validation/error handling makes it the vulnerable entry point for malformed multipart requests that trigger excessive resource consumption.