-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| distributed | pip | >= 0, < 2021.10.0 | 2021.10.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from LocalCluster not propagating the 'host' parameter to worker/nanny instances. The commit diff shows 'host' was added to worker_kwargs in LocalCluster's init method, and the accompanying test validates that workers/scheduler bind to 127.0.0.1. The absence of this parameter in worker configuration before the fix would result in workers listening on all interfaces (0.0.0.0).
A Semantic Attack on Google Gemini - Read the Latest Research