CVE-2023-50731

MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the put method in mindsdb/mindsdb/api/http/namespaces/file.py does not validate the user-controlled name value, which is used in a temporary file name, which is afterwards opened for writing on lines 122-125, which...

thenify 安全漏洞

thenify is an open source callback-based function from Thenables that uses . A security vulnerability exists in versions prior to thenify 3.3.1 , which stems from the vulnerability of this package to arbitrary code execution , the name parameter provided to the package can be controlled by the us...