Description
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | mage-ai | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mage-ai | <= 0.9.73 | — | GHSA-4mrc-w7jh-hx4j |