GitHub Security Lab (GHSL) Vulnerability Report: GHSL-2023-184

Moderate

ZoranPandovski published GHSA-crhp-7c74-cg4c

Dec 11, 2023

Package

mindsdb (pip)

Affected versions

23.7.4.1

Patched versions

23.11.4.1

Description

Impact

Issue: Limited file write in file.py (GHSL-2023-184)

Patches

Use mindsdb staging branch or v23.11.4.1

References

See CodeQL path injection prevention guidelines and OWASP guidelines.