HIGH7.5PyPI
GHSA-2g5w-29q9-w6hx· CVE-2023-30620, PYSEC-2023-27mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Modified: 9/10/2026
package
PyPI/mindsdb
pkg:pypi/mindsdb
CRITICAL9.0PyPI
GHSA-32fj-r8qw-r8w8· CVE-2024-45856, PYSEC-2026-1628MindsDB Cross-site Scripting vulnerability
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-34mr-6q8x-g9r6· CVE-2023-49795, PYSEC-2023-277Server-Side Request Forgery in mindsdb
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-4894-xqv6-vrfq· CVE-2026-27483, PYSEC-2026-2205MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
Modified: 7/13/2026
CRITICAL9.3PyPI
GHSA-4jcv-vp96-94xr· CVE-2024-24759, PYSEC-2024-74MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Modified: 11/27/2024
MEDIUM6.3PyPI
GHSA-6xw9-2p64-7622· CVE-2026-2531, PYSEC-2026-91MindsDB affected by a SSRF vulnerability
Modified: 6/6/2026
HIGH7.1PyPI
GHSA-7vhh-gfjc-x8rm· CVE-2024-45854, PYSEC-2024-84MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/17/2024
HIGH8.8PyPI
GHSA-7vhj-pfwv-hx3w· CVE-2024-45852, PYSEC-2024-82MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/16/2024
HIGH8.5PyPI
GHSA-7x45-phmr-9wqp· CVE-2022-23522, PYSEC-2023-26Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Modified: 10/1/2024
CRITICAL9.1PyPI
GHSA-8hx6-qv6f-xgcw· CVE-2023-38699, PYSEC-2023-140MindsDB can be made to not verify SSL certificates
Modified: 2/13/2025
MEDIUM5.8PyPI
GHSA-93c5-rj2p-w52x· CVE-2024-3575, PYSEC-2024-288Cross-site Scripting (XSS) in mindsdb/mindsdb
Modified: 6/6/2026
HIGH7.3PyPI
GHSA-9f6m-65v9-x9g2· CVE-2026-7711, PYSEC-2026-2648MindsDB has an Improper Access Control Issue
Modified: 7/13/2026
HIGH8.8PyPI
GHSA-9gq6-6936-885w· CVE-2024-45848, PYSEC-2024-78MindsDB Eval Injection vulnerability
Modified: 9/16/2024
HIGH8.8PyPI
GHSA-c85f-pcx6-2ghm· CVE-2024-45849, PYSEC-2024-79MindsDB Eval Injection vulnerability
Modified: 9/16/2024
MEDIUM5.3PyPI
GHSA-crhp-7c74-cg4c· CVE-2023-49796Improper Input Validation in mindsdb
Modified: 11/22/2024
HIGH8.8PyPI
GHSA-crmg-rp64-5cm3· CVE-2024-45847, PYSEC-2026-1629MindsDB Eval Injection vulnerability
Modified: 7/7/2026
HIGH7.1PyPI
GHSA-fr9q-rgwq-g5r5· CVE-2024-45855, PYSEC-2024-85MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/17/2024
CRITICAL9.1PyPI
GHSA-j8w6-2r9h-cxhj· CVE-2023-50731, PYSEC-2023-279GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182
Modified: 11/22/2024
HIGH7.1PyPI
GHSA-q9r8-89xr-4xv4· CVE-2024-45853, PYSEC-2024-83MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/16/2024
HIGH8.1PyPI
GHSA-qqhf-pm3j-96g7· CVE-2025-68472, PYSEC-2026-90MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
Modified: 6/6/2026
HIGH8.8PyPI
GHSA-v6g6-3cm3-vf6c· CVE-2024-45850, PYSEC-2024-80MindsDB Eval Injection vulnerability
Modified: 9/16/2024
HIGH8.8PyPI
GHSA-wcjw-3v6p-4v3r· CVE-2024-45846, PYSEC-2024-77MindsDB Eval Injection vulnerability
Modified: 9/16/2024
HIGH8.8PyPI
GHSA-wf9g-c67g-h4ch· CVE-2024-45851, PYSEC-2024-81MindsDB Eval Injection vulnerability
Modified: 9/16/2024
MEDIUM6.5PyPI
PYSEC-2023-140· CVE-2023-38699, GHSA-8hx6-qv6f-xgcwModified: 11/8/2023
—PyPI
PYSEC-2023-26· CVE-2022-23522, GHSA-7x45-phmr-9wqpModified: 11/8/2023
—PyPI
PYSEC-2023-27· CVE-2023-30620, GHSA-2g5w-29q9-w6hxModified: 11/8/2023
MEDIUM5.3PyPI
PYSEC-2023-277· CVE-2023-49795, GHSA-34mr-6q8x-g9r6Modified: 11/21/2024
CRITICAL9.1PyPI
PYSEC-2023-279· CVE-2023-50731, GHSA-j8w6-2r9h-cxhjModified: 11/21/2024
MEDIUM6.1PyPI
PYSEC-2024-288· CVE-2024-3575, GHSA-93c5-rj2p-w52xModified: 6/10/2026
CRITICAL9.1PyPI
PYSEC-2024-74· CVE-2024-24759, GHSA-4jcv-vp96-94xrModified: 9/6/2024
HIGH8.8PyPI
PYSEC-2024-77· CVE-2024-45846, GHSA-wcjw-3v6p-4v3rModified: 6/10/2026
HIGH8.8PyPI
PYSEC-2024-78· CVE-2024-45848, GHSA-9gq6-6936-885wModified: 6/10/2026
HIGH8.8PyPI
PYSEC-2024-79· CVE-2024-45849, GHSA-c85f-pcx6-2ghmModified: 6/10/2026
HIGH8.8PyPI
PYSEC-2024-80· CVE-2024-45850, GHSA-v6g6-3cm3-vf6cModified: 6/10/2026
HIGH8.8PyPI
PYSEC-2024-81· CVE-2024-45851, GHSA-wf9g-c67g-h4chModified: 6/10/2026
HIGH8.8PyPI
PYSEC-2024-82· CVE-2024-45852, GHSA-7vhj-pfwv-hx3wModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2024-83· CVE-2024-45853, GHSA-q9r8-89xr-4xv4Modified: 6/10/2026
HIGH7.5PyPI
PYSEC-2024-84· CVE-2024-45854, GHSA-7vhh-gfjc-x8rmModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2024-85· CVE-2024-45855, GHSA-fr9q-rgwq-g5r5Modified: 6/10/2026
CRITICAL9.0PyPI
PYSEC-2026-1628· CVE-2024-45856, GHSA-32fj-r8qw-r8w8MindsDB Cross-site Scripting vulnerability
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-1629· CVE-2024-45847, GHSA-crmg-rp64-5cm3MindsDB Eval Injection vulnerability
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-2205· CVE-2026-27483, GHSA-4894-xqv6-vrfqModified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2648· CVE-2026-7711, GHSA-9f6m-65v9-x9g2MindsDB has an Improper Access Control Issue
Modified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-90· CVE-2025-68472, GHSA-qqhf-pm3j-96g7Modified: 5/20/2026
HIGH7.3PyPI
PYSEC-2026-91· CVE-2026-2531, GHSA-6xw9-2p64-7622Modified: 6/10/2026