GHSA-j8w6-2r9h-cxhj: GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182

Skip to content

• • Actions

    Automate any workflow

  • Packages

    Host and manage packages

  • Security

    Find and fix vulnerabilities

  • Codespaces

    Instant dev environments

  • Copilot

    Write better code with AI

  • Code review

    Manage code changes

  • Issues

    Plan and track work

  • Discussions

    Collaborate outside of code

• • GitHub Sponsors

    Fund open source developers

*   The ReadME Project
    
    GitHub community articles

• Pricing

1. GitHub Advisory Database
2. GitHub Reviewed
3. GHSA-j8w6-2r9h-cxhj

GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182

Moderate severity GitHub Reviewed Published Dec 14, 2023 in mindsdb/mindsdb • Updated Dec 15, 2023

Package

pip mindsdb (pip)

Affected versions

< 23.7.4.1

Patched versions

23.11.4.1

Description

Impact

Issue: Arbitrary file write in file.py (GHSL-2023-183)

Patches

Use mindsdb staging branch or v23.11.4.1

References

• GHSA-j8w6-2r9h-cxhj

Published to the GitHub Advisory Database

Dec 15, 2023

Last updated

Dec 15, 2023