Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

CVE-2024-45856

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-32fj-r8qw-r8w8

MindsDB Cross-site Scripting vulnerability A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.

gitlab/pypi/mindsdb/CVE-2024-45856

MindsDB Cross-site Scripting vulnerability A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.

pypa/mindsdb/PYSEC-2026-1628

MindsDB Cross-site Scripting vulnerability A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.

pysec/PYSEC-2026-1628

MindsDB Cross-site Scripting vulnerability A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.