-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| aim | pip | <= 3.24.0 |
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability documentation explicitly identifies dangerouslySetInnerHTML in textbox.tsx as the vulnerable pattern. This React API bypasses built-in XSS protections by design when used with untrusted input. The CWE-79 classification and multiple independent sources (GitHub Advisory, NVD, VulDB) consistently attribute the vulnerability to this specific function's handling of the 'query' parameter. The high confidence comes from direct mentions in all vulnerability descriptions and alignment with known dangerous React patterns.
Ongoing coverage of React2Shell