Skip to content
OpenAdvisories

Package · PyPI

mage-ai

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-45190

    Mage AI pipeline interaction request remote arbitrary file leak

    Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

    mage-ai PyPI
  • Medium 6.5
    CVE-2024-45189

    Mage AI git content request remote arbitrary file leak

    Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request

    mage-ai PyPI
  • Medium 6.5
    CVE-2024-45188

    Mage AI file content request remote arbitrary file leak

    Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request

    mage-ai PyPI
  • Medium 5.3
    CVE-2024-8072

    Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

    Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

    mage-ai PyPI
  • Medium 5.9
    CVE-2023-31143

    Mage terminal user authentication not working properly

    mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior to 0.8.72 with user authentication enabled may be affected by a vulnerability. The terminal could be accessed by users …

    mage-ai mage-ai mage-ai PyPI