Skip to content
OpenAdvisories

Package · PyPI

mindsdb

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-2531

    MindsDB File Upload security.py clear_filename server-side request forgery

    A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the component File Upload. Such manipulation leads to server-side request forgery. The att…

    mindsdb PyPI
  • Medium 5.8
    CVE-2024-3575

    Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb

    Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb

    MindsDB mindsdb/mindsdb mindsdb PyPI
  • Medium 5.3
    CVE-2023-49796

    MindsDB Arbitrary File Write vulnerability

    MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file write vulnerability in `file.py` Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.

    MindsDB MindsDB mindsdb PyPI
  • Medium 6.5
    CVE-2023-49795

    MindsDB Server-Side Request Forgery vulnerability

    MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v2…

    MindsDB MindsDB mindsdb PyPI