-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ebookmeta | pip | < 1.2.8 | 1.2.8 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly names 'ebookmeta.get_metadata' as the vulnerable function. The CWE-611/776 mapping confirms this is an XML parsing issue. While implementation details aren't shown, the pattern matches typical XXE vulnerabilities where XML parsers are configured with unsafe defaults (no_dtd=True missing in lxml, or similar). The combination with lxml version dependency in the GitHub issue suggests this function uses lxml's XML parsing without proper security settings.