CVE-2023-49795

MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in file.py. This can lead to limited information disclosure. Users should use MindsDB's staging branch or v23.11.4.1, which contain a fix for the issu...

CVE-2023-49796

MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file write vulnerability in file.py Users should use MindsDB's staging branch or v23.11.4.1, which contain a fix for the issue...

CVE-2022-23522

MindsDB is an open source machine learning platform. An unsafe extraction is being performed using shutil.unpackarchive from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. This vulnerability is sometimes called a TarSlip or a ZipSlip...

EUVD-2023-0147

Malicious code in bioql PyPI...

EUVD-2023-0151

Malicious code in bioql PyPI...

EUVD-2024-2774

Malicious code in bioql PyPI...

EUVD-2024-0107

Malicious code in bioql PyPI...

EUVD-2024-0110

Malicious code in bioql PyPI...

EUVD-2024-0113

Malicious code in bioql PyPI...

EUVD-2024-0109

Malicious code in bioql PyPI...

EUVD-2024-0111

Malicious code in bioql PyPI...

EUVD-2024-2700

Malicious code in bioql PyPI...

EUVD-2024-1166

Malicious code in bioql PyPI...

EUVD-2024-0108

Malicious code in bioql PyPI...

EUVD-2023-0149

Malicious code in bioql PyPI...

EUVD-2023-0148

Malicious code in bioql PyPI...

EUVD-2024-0105

Malicious code in bioql PyPI...

EUVD-2024-0106

Malicious code in bioql PyPI...

EUVD-2024-0112

Malicious code in bioql PyPI...

Template Injection

Overview MindsDB is a MindsDB server, provides server capabilities to mindsdb native python library Affected versions of this package are vulnerable to Template Injection in the prepareprompts function, which allows the ContextualPreprocessor template to be corrupted. Note: Code injection is not...