-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| open-webui | pip |
Miggo AIRoot Cause AnalysisWhile the provided commit diff shows unrelated refactoring in audio.py, the vulnerability description explicitly implicates the /audio/api/v1/transcriptions endpoint's file upload handler. In FastAPI applications, this would typically be a POST route function in the same file as other audio-related routes (audio.py). The lack of content-type validation and path traversal protections aligns with CWE-434. Confidence is medium because the exact function name isn't visible in provided diffs, but the endpoint and vulnerability mechanics strongly indicate this handler.