mindsdb vulnerabilities (PyPI)
23 vulnerabilities.
-
mindsdbPyPI MindsDB Engine proc_wrapper.py exec unrestricted upload 6.9 Medium -
mindsdbPyPI MindsDB has Path Traversal in /api/files Leading to Remote Code Execution 8.8 High -
mindsdbPyPI MindsDB File Upload security.py clear_filename server-side request forgery 5.3 Medium -
mindsdbPyPI MindsDB has improper sanitation of filepath that leads to information disclosure and DOS 8.1 High -
mindsdbPyPI MindsDB Cross-site Scripting vulnerability 9.0 Critical -
mindsdbPyPI MindsDB Deserialization of Untrusted Data vulnerability 7.1 High -
mindsdbPyPI MindsDB Deserialization of Untrusted Data vulnerability 7.1 High -
mindsdbPyPI MindsDB Deserialization of Untrusted Data vulnerability 7.1 High -
mindsdbPyPI MindsDB Deserialization of Untrusted Data vulnerability 8.8 High -
mindsdbPyPI MindsDB Eval Injection vulnerability 8.8 High -
mindsdbPyPI MindsDB Eval Injection vulnerability 8.8 High -
mindsdbPyPI MindsDB Eval Injection vulnerability 8.8 High -
mindsdbPyPI MindsDB Eval Injection vulnerability 8.8 High -
mindsdbPyPI MindsDB Eval Injection vulnerability 8.8 High -
mindsdbPyPI MindsDB Eval Injection vulnerability 8.8 High -
mindsdbPyPI MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding 9.3 Critical -
mindsdbPyPI Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb 5.8 Medium -
mindsdbPyPI MindsDB has arbitrary file write in file.py 9.1 Critical -
mindsdbPyPI MindsDB Arbitrary File Write vulnerability 5.3 Medium -
mindsdbPyPI MindsDB Server-Side Request Forgery vulnerability 6.5 Medium -
mindsdbPyPI MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue 9.1 Critical -
mindsdbPyPI Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb 7.5 High -
mindsdbPyPI Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb 8.5 High