mindsdb

2 Products 19 CVEs

CVE Severity Distribution (All Time)

Critical

High

Medium

Low

Timeline Overview

Last 30 Days 0 CVEs

Last 6 Months 0 CVEs

Last Year 12 CVEs

Products

View all

mindsdb

13 Versions 19 CVEs

mindsdb/mindsdb

2 Versions 1 CVE

Recent CVEs

View all

CVE-2024-45856 CRITICAL 9 months, 3 weeks ago

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a …

CVE-2024-45855 HIGH 9 months, 3 weeks ago

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model …

CVE-2024-45854 HIGH 9 months, 3 weeks ago

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model …

CVE-2024-45853 HIGH 9 months, 3 weeks ago

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model …

CVE-2024-45852 HIGH 9 months, 3 weeks ago

Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbi…

CVE-2024-45851 HIGH 9 months, 3 weeks ago

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integrat…

CVE-2024-45850 HIGH 9 months, 3 weeks ago

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integrat…

CVE-2024-45849 HIGH 9 months, 3 weeks ago

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integrat…

CVE-2024-45848 HIGH 9 months, 3 weeks ago

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is insta…

CVE-2024-45847 HIGH 9 months, 3 weeks ago

An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is in…