mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Modified: 9/10/2026
package
pkg:pypi/mindsdb
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Modified: 9/10/2026
MindsDB Cross-site Scripting vulnerability
Modified: 7/7/2026
Server-Side Request Forgery in mindsdb
Modified: 9/10/2026
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
Modified: 7/13/2026
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Modified: 11/27/2024
MindsDB affected by a SSRF vulnerability
Modified: 6/6/2026
MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/17/2024
MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/16/2024
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Modified: 10/1/2024
MindsDB can be made to not verify SSL certificates
Modified: 2/13/2025
Cross-site Scripting (XSS) in mindsdb/mindsdb
Modified: 6/6/2026
MindsDB has an Improper Access Control Issue
Modified: 7/13/2026
MindsDB Eval Injection vulnerability
Modified: 9/16/2024
MindsDB Eval Injection vulnerability
Modified: 9/16/2024
Improper Input Validation in mindsdb
Modified: 11/22/2024
MindsDB Eval Injection vulnerability
Modified: 7/7/2026
MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/17/2024
GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182
Modified: 11/22/2024
MindsDB Deserialization of Untrusted Data vulnerability
Modified: 9/16/2024
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
Modified: 6/6/2026
MindsDB Eval Injection vulnerability
Modified: 9/16/2024
MindsDB Eval Injection vulnerability
Modified: 9/16/2024
MindsDB Eval Injection vulnerability
Modified: 9/16/2024
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/21/2024
Modified: 11/21/2024
Modified: 6/10/2026
Modified: 9/6/2024
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 6/10/2026
MindsDB Cross-site Scripting vulnerability
Modified: 7/7/2026
MindsDB Eval Injection vulnerability
Modified: 7/7/2026
Modified: 7/13/2026
MindsDB has an Improper Access Control Issue
Modified: 7/13/2026
Modified: 5/20/2026
Modified: 6/10/2026