Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-vdbp-38by-5qa8
SummaryDeserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describe’ query is run on it.
Aliases
0
alias CVE-2024-45854
1
alias GHSA-7vhh-gfjc-x8rm
2
alias PYSEC-2024-84
Fixed_packages
Affected_packages
0
url pkg:pypi/mindsdb@23.10.3.0
purl pkg:pypi/mindsdb@23.10.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8ugv-3zbz-s3hz
6
vulnerability VCID-msja-d93b-ckes
7
vulnerability VCID-pncv-133f-p3hr
8
vulnerability VCID-rv2m-1urm-yffn
9
vulnerability VCID-un9x-jxca-c7bq
10
vulnerability VCID-vdbp-38by-5qa8
11
vulnerability VCID-vvf5-3mjj-vfhp
12
vulnerability VCID-xpnd-pvwy-3bag
13
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.10.3.0
1
url pkg:pypi/mindsdb@23.10.3.1
purl pkg:pypi/mindsdb@23.10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8ugv-3zbz-s3hz
6
vulnerability VCID-msja-d93b-ckes
7
vulnerability VCID-pncv-133f-p3hr
8
vulnerability VCID-rv2m-1urm-yffn
9
vulnerability VCID-un9x-jxca-c7bq
10
vulnerability VCID-vdbp-38by-5qa8
11
vulnerability VCID-vvf5-3mjj-vfhp
12
vulnerability VCID-xpnd-pvwy-3bag
13
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.10.3.1
2
url pkg:pypi/mindsdb@23.10.5.0
purl pkg:pypi/mindsdb@23.10.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8ugv-3zbz-s3hz
6
vulnerability VCID-8yk3-stqs-h7c2
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-un9x-jxca-c7bq
13
vulnerability VCID-vdbp-38by-5qa8
14
vulnerability VCID-vvf5-3mjj-vfhp
15
vulnerability VCID-xpnd-pvwy-3bag
16
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.10.5.0
3
url pkg:pypi/mindsdb@23.11.1.0
purl pkg:pypi/mindsdb@23.11.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8ugv-3zbz-s3hz
6
vulnerability VCID-8yk3-stqs-h7c2
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-un9x-jxca-c7bq
13
vulnerability VCID-vdbp-38by-5qa8
14
vulnerability VCID-vvf5-3mjj-vfhp
15
vulnerability VCID-xpnd-pvwy-3bag
16
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.11.1.0
4
url pkg:pypi/mindsdb@23.11.4.0
purl pkg:pypi/mindsdb@23.11.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8ugv-3zbz-s3hz
6
vulnerability VCID-8yk3-stqs-h7c2
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-un9x-jxca-c7bq
13
vulnerability VCID-vdbp-38by-5qa8
14
vulnerability VCID-vvf5-3mjj-vfhp
15
vulnerability VCID-xpnd-pvwy-3bag
16
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.11.4.0
5
url pkg:pypi/mindsdb@23.11.4.1
purl pkg:pypi/mindsdb@23.11.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-kt19-81vm-9qes
7
vulnerability VCID-msja-d93b-ckes
8
vulnerability VCID-pncv-133f-p3hr
9
vulnerability VCID-r1a3-by3u-y7dy
10
vulnerability VCID-rv2m-1urm-yffn
11
vulnerability VCID-un9x-jxca-c7bq
12
vulnerability VCID-vdbp-38by-5qa8
13
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.11.4.1
6
url pkg:pypi/mindsdb@23.11.4.4a6
purl pkg:pypi/mindsdb@23.11.4.4a6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-un9x-jxca-c7bq
13
vulnerability VCID-vdbp-38by-5qa8
14
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.11.4.4a6
7
url pkg:pypi/mindsdb@23.12.4.0
purl pkg:pypi/mindsdb@23.12.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
15
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.12.4.0
8
url pkg:pypi/mindsdb@23.12.4.1
purl pkg:pypi/mindsdb@23.12.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
15
vulnerability VCID-ykx2-fwve-qkew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.12.4.1
9
url pkg:pypi/mindsdb@23.12.4.2
purl pkg:pypi/mindsdb@23.12.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@23.12.4.2
10
url pkg:pypi/mindsdb@24.1.4.0
purl pkg:pypi/mindsdb@24.1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.1.4.0
11
url pkg:pypi/mindsdb@24.2.3.0
purl pkg:pypi/mindsdb@24.2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.2.3.0
12
url pkg:pypi/mindsdb@24.3.4.0
purl pkg:pypi/mindsdb@24.3.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.3.4.0
13
url pkg:pypi/mindsdb@24.3.4.1
purl pkg:pypi/mindsdb@24.3.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.3.4.1
14
url pkg:pypi/mindsdb@24.3.4.2
purl pkg:pypi/mindsdb@24.3.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.3.4.2
15
url pkg:pypi/mindsdb@24.3.5.0
purl pkg:pypi/mindsdb@24.3.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.3.5.0
16
url pkg:pypi/mindsdb@24.4.2.0
purl pkg:pypi/mindsdb@24.4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.4.2.0
17
url pkg:pypi/mindsdb@24.4.2.1
purl pkg:pypi/mindsdb@24.4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.4.2.1
18
url pkg:pypi/mindsdb@24.4.3.0
purl pkg:pypi/mindsdb@24.4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.4.3.0
19
url pkg:pypi/mindsdb@24.5.4.0
purl pkg:pypi/mindsdb@24.5.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.5.4.0
20
url pkg:pypi/mindsdb@24.6.1.0
purl pkg:pypi/mindsdb@24.6.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.1.0
21
url pkg:pypi/mindsdb@24.6.1.1
purl pkg:pypi/mindsdb@24.6.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.1.1
22
url pkg:pypi/mindsdb@24.6.2.0
purl pkg:pypi/mindsdb@24.6.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.2.0
23
url pkg:pypi/mindsdb@24.6.2.2
purl pkg:pypi/mindsdb@24.6.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.2.2
24
url pkg:pypi/mindsdb@24.6.3.0
purl pkg:pypi/mindsdb@24.6.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.3.0
25
url pkg:pypi/mindsdb@24.6.3.1
purl pkg:pypi/mindsdb@24.6.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.3.1
26
url pkg:pypi/mindsdb@24.6.4.1
purl pkg:pypi/mindsdb@24.6.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.6.4.1
27
url pkg:pypi/mindsdb@24.7.1.0
purl pkg:pypi/mindsdb@24.7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.7.1.0
28
url pkg:pypi/mindsdb@24.7.2.0
purl pkg:pypi/mindsdb@24.7.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.7.2.0
29
url pkg:pypi/mindsdb@24.7.3.0
purl pkg:pypi/mindsdb@24.7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.7.3.0
30
url pkg:pypi/mindsdb@24.7.4.0
purl pkg:pypi/mindsdb@24.7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-8yk3-stqs-h7c2
6
vulnerability VCID-dfcw-zje8-m7h5
7
vulnerability VCID-kt19-81vm-9qes
8
vulnerability VCID-msja-d93b-ckes
9
vulnerability VCID-pncv-133f-p3hr
10
vulnerability VCID-r1a3-by3u-y7dy
11
vulnerability VCID-rv2m-1urm-yffn
12
vulnerability VCID-tt6q-rpjv-e3bz
13
vulnerability VCID-un9x-jxca-c7bq
14
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.7.4.0
31
url pkg:pypi/mindsdb@24.7.4.1
purl pkg:pypi/mindsdb@24.7.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.7.4.1
32
url pkg:pypi/mindsdb@24.7.5.0
purl pkg:pypi/mindsdb@24.7.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.7.5.0
33
url pkg:pypi/mindsdb@24.8.1.0
purl pkg:pypi/mindsdb@24.8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.8.1.0
34
url pkg:pypi/mindsdb@24.8.1.1
purl pkg:pypi/mindsdb@24.8.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.8.1.1
35
url pkg:pypi/mindsdb@24.8.2.0
purl pkg:pypi/mindsdb@24.8.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.8.2.0
36
url pkg:pypi/mindsdb@24.8.3.0
purl pkg:pypi/mindsdb@24.8.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.8.3.0
37
url pkg:pypi/mindsdb@24.8.4.0
purl pkg:pypi/mindsdb@24.8.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.8.4.0
38
url pkg:pypi/mindsdb@24.9.1.0
purl pkg:pypi/mindsdb@24.9.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.9.1.0
39
url pkg:pypi/mindsdb@24.9.2.0
purl pkg:pypi/mindsdb@24.9.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.9.2.0
40
url pkg:pypi/mindsdb@24.9.2.1
purl pkg:pypi/mindsdb@24.9.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b1n-66bj-v3dz
1
vulnerability VCID-453x-w26r-kkgk
2
vulnerability VCID-4u93-1dq3-y3b3
3
vulnerability VCID-6d5g-g2tf-6yck
4
vulnerability VCID-8g4t-89pm-cfan
5
vulnerability VCID-msja-d93b-ckes
6
vulnerability VCID-pncv-133f-p3hr
7
vulnerability VCID-rv2m-1urm-yffn
8
vulnerability VCID-vdbp-38by-5qa8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mindsdb@24.9.2.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45854
reference_id
reference_type
scores
0
value 0.00225
scoring_system epss
scoring_elements 0.45501
published_at 2026-06-12T12:55:00Z
1
value 0.00225
scoring_system epss
scoring_elements 0.45499
published_at 2026-06-14T12:55:00Z
2
value 0.00225
scoring_system epss
scoring_elements 0.45511
published_at 2026-06-13T12:55:00Z
3
value 0.00225
scoring_system epss
scoring_elements 0.45352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45854
1
reference_url https://github.com/mindsdb/mindsdb
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mindsdb/mindsdb
2
reference_url https://github.com/mindsdb/mindsdb/blob/v24.9.2.1/mindsdb/integrations/handlers/byom_handler/byom_handler.py#L444-L449
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mindsdb/mindsdb/blob/v24.9.2.1/mindsdb/integrations/handlers/byom_handler/byom_handler.py#L444-L449
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-84.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-84.yaml
4
reference_url https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb
5
reference_url https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
reference_id 2024-09-mindsdb
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-12T17:05:13Z/
url https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45854
reference_id CVE-2024-45854
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45854
7
reference_url https://github.com/advisories/GHSA-7vhh-gfjc-x8rm
reference_id GHSA-7vhh-gfjc-x8rm
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7vhh-gfjc-x8rm
Weaknesses
0
cwe_id 502
name Deserialization of Untrusted Data
description The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-vdbp-38by-5qa8