-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability description explicitly names the KnowledgeBaseWebReader class and its get_article_urls function as the source of the DoS vulnerability due to improper handling of the max_depth parameter, leading to uncontrolled recursion. The provided commit 3c65db2947271de3bd1927dc66a044da385de4da directly addresses this issue by modifying the get_article_urls function. The patch introduces a depth parameter to track the current recursion level and adds a condition to stop recursion if depth reaches max_depth. This confirms that the get_article_urls function, prior to this patch, was the vulnerable function. The full namespace is derived from the file path and class structure typical in Python projects.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| llama-index | pip | >= 0.12.15, < 0.12.21 | 0.12.21 |
Ongoing coverage of React2Shell