-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| scrapy | pip | < 2.11.2 | 2.11.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the _build_redirect_request function's original logic that compared only netloc (host+port) between source and redirect URLs. The commit diff shows this function was modified to add separate checks for scheme, host, and port changes. The CVE description explicitly states the flaw was located in this function, and the patch adds proper scheme/origin validation to handle Authorization header removal according to security standards.
PythonPythonOngoing coverage of React2Shell