Approved changes feed: RSS · Atom

cpe:2.3:a:mindsdb:mindsdb:23.7.4.1:*:*:*:*:*:*:*

part: a version: 23.7.4.1 update: *

VendorMindsdb (92c9ccc4-49db-578d-b077-89ad0984be51)
ProductMindsdb (49643a71-6cc6-542d-955f-e64e3cb9888d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mindsdb/mindsdb purl2cpe 2026-06-01 10:15:40.368804
pkg:pypi/mindsdb purl2cpe 2026-06-01 10:15:40.368806

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49796 vulnerable 2026-06-08 06:16:10.498332 MindsDB Arbitrary File Write vulnerability
MEDIUM (5.3)
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file write vulnerability in `file.py` Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.
Published: 2023-12-11T20:38:25.330Z
Updated: 2024-08-02T22:01:26.096Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.