AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

MindsDB security advisories

23 advisories · 2 critical or high in 12 months · latest May 4

Repository

23 advisories

Medium 7.3May 4MindsDB has an Improper Access Control IssueCVE-2026-7711no fix yetHigh 8.8Feb 24MindsDB: Path Traversal in /api/files Leading to Remote Code ExecutionCVE-2026-27483fixed in 25.9.1.1Low 6.3Feb 16MindsDB affected by a SSRF vulnerabilityCVE-2026-2531no fix yetHigh 8.1Jan 12MindsDB has improper sanitation of filepath that leads to information disclosure and DOSCVE-2025-68472fixed in 25.11.1Medium 9.0Sep 12, 2024MindsDB Cross-site Scripting vulnerabilityCVE-2024-45856no fix yetHigh 7.1Sep 12, 2024MindsDB Deserialization of Untrusted Data vulnerabilityCVE-2024-45854no fix yetHigh 8.8Sep 12, 2024MindsDB Deserialization of Untrusted Data vulnerabilityCVE-2024-45852no fix yetHigh 7.1Sep 12, 2024MindsDB Deserialization of Untrusted Data vulnerabilityCVE-2024-45855no fix yetHigh 7.1Sep 12, 2024MindsDB Deserialization of Untrusted Data vulnerabilityCVE-2024-45853no fix yetHigh 8.8Sep 12, 2024MindsDB Eval Injection vulnerabilityCVE-2024-45851fixed in 24.7.4.1High 8.8Sep 12, 2024MindsDB Eval Injection vulnerabilityCVE-2024-45848fixed in 24.7.4.1High 8.8Sep 12, 2024MindsDB Eval Injection vulnerabilityCVE-2024-45849fixed in 24.7.4.1High 8.8Sep 12, 2024MindsDB Eval Injection vulnerabilityCVE-2024-45847fixed in 24.7.4.1High 8.8Sep 12, 2024MindsDB Eval Injection vulnerabilityCVE-2024-45850fixed in 24.7.4.1High 8.8Sep 12, 2024MindsDB Eval Injection vulnerabilityCVE-2024-45846fixed in 24.7.4.1High 9.3Sep 5, 2024MindsDB Vulnerable to Bypass of SSRF Protection with DNS RebindingCVE-2024-24759fixed in 23.12.4.2Medium 5.8Apr 16, 2024Cross-site Scripting (XSS) in mindsdb/mindsdbCVE-2024-3575no fix yetHigh 9.1Dec 15, 2023GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182CVE-2023-50731fixed in 23.11.4.1Medium 5.3Dec 12, 2023Improper Input Validation in mindsdbCVE-2023-49796fixed in 23.11.4.1Medium 6.5Dec 12, 2023Server-Side Request Forgery in mindsdbCVE-2023-49795fixed in 23.11.4.1Critical 9.1Aug 1, 2023MindsDB can be made to not verify SSL certificatesCVE-2023-38699fixed in 23.7.4.0High 7.5Mar 30, 2023mindsdb arbitrary file write when extracting a remotely retrieved TarballCVE-2023-30620fixed in 23.2.1.0Medium 8.5Mar 30, 2023Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote locationCVE-2022-23522fixed in 22.11.4.3
About MindsDB

The AI data platform: models and agents over your databases.

Packages watched: mindsdb (PyPI).

mindsdb/mindsdbMindsDB

MindsDB elsewhere on Ibis: Paydays · Repos