mindsdb vulnerabilities

MindsDB's AI SQL Server enables developers to build AI tools that need access to real-time data to perform their tasks

25.9.1.2

7 years ago

1 months ago

Known vulnerabilities in the mindsdb package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Template Injection	[,25.7.3.0)
C Cross-site Scripting (XSS)	[,24.7.4.1)
H Deserialization of Untrusted Data	[23.10.2.0,)
H Deserialization of Untrusted Data	[23.10.2.0,)
H Deserialization of Untrusted Data	[23.10.3.0,)
H Deserialization of Untrusted Data	[23.3.2.0,)
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	[23.11.4.4a6,24.7.4.1)
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	[23.12.4.0,24.7.4.1)
H Eval Injection	[23.10.5.0,24.7.4.1)
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	[23.10.3.0,24.7.4.1)
H Eval Injection	[23.10.5.0,24.7.4.1)
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	[23.10.5.0,24.7.4.1)
H Server-side Request Forgery (SSRF)	[,23.12.4.2)
M Cross-site Scripting	[,23.10.2.0)
M Files or Directories Accessible to External Parties	[,23.11.4.1)
M Server-side Request Forgery (SSRF)	[,23.11.4.0)
M Improper Input Validation	[23.7.4.1,23.11.4.0)
C Improper Certificate Validation	[,23.7.4.0)
H Arbitrary File Write via Archive Extraction (Zip Slip)	[,24.4.2.1)
M Arbitrary File Write via Archive Extraction (Zip Slip)	[,23.2.1.0)

556 VERSIONS IN TOTAL See all versions