Analysis

Author: github-actions

vulns/mindsdb/PYSEC-2023-278.yaml

@@ -573,6 +573,7 @@ affected:
   - 25.10.0rc1
   - 25.10.0
   - 25.10.1
+  - 25.11.0rc1
 aliases:
 - CVE-2023-49796
 - GHSA-crhp-7c74-cg4c
@@ -581,7 +582,7 @@ details: MindsDB connects artificial intelligence models to real time data. Vers
   should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the
   issue.
 id: PYSEC-2023-278
-modified: '2025-10-27T07:48:17.326672Z'
+modified: '2025-11-11T17:23:07.414018Z'
 published: '2023-12-11T21:15:00Z'
 references:
 - type: ADVISORY

vulns/mindsdb/PYSEC-2024-82.yaml

@@ -166,13 +166,14 @@ affected:
   - 25.10.0rc1
   - 25.10.0
   - 25.10.1
+  - 25.11.0rc1
 aliases:
 - CVE-2024-45852
 details: Deserialization of untrusted data can occur in versions 23.3.2.0 and newer
   of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary
   code on the server when interacted with.
 id: PYSEC-2024-82
-modified: '2025-10-27T07:48:17.624467Z'
+modified: '2025-11-11T17:23:07.547772Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE

vulns/mindsdb/PYSEC-2024-83.yaml

@@ -126,13 +126,14 @@ affected:
   - 25.10.0rc1
   - 25.10.0
   - 25.10.1
+  - 25.11.0rc1
 aliases:
 - CVE-2024-45853
 details: "Deserialization of untrusted data can occur in versions 23.10.2.0 and newer\
   \ of the MindsDB platform, enabling a maliciously uploaded \u2018inhouse\u2019 model\
   \ to run arbitrary code on the server when used for a prediction."
 id: PYSEC-2024-83
-modified: '2025-10-27T07:48:17.746372Z'
+modified: '2025-11-11T17:23:07.664490Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE

vulns/mindsdb/PYSEC-2024-84.yaml

@@ -125,14 +125,15 @@ affected:
   - 25.10.0rc1
   - 25.10.0
   - 25.10.1
+  - 25.11.0rc1
 aliases:
 - CVE-2024-45854
 details: "Deserialization of untrusted data can occur in versions 23.10.3.0 and newer\
   \ of the MindsDB platform, enabling a maliciously uploaded \u2018inhouse\u2019 model\
   \ to run arbitrary code on the server when a \u2018describe\u2019 query is run on\
   \ it."
 id: PYSEC-2024-84
-modified: '2025-10-27T07:48:17.870421Z'
+modified: '2025-11-11T17:23:07.774574Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE

vulns/mindsdb/PYSEC-2024-85.yaml

@@ -126,13 +126,14 @@ affected:
   - 25.10.0rc1
   - 25.10.0
   - 25.10.1
+  - 25.11.0rc1
 aliases:
 - CVE-2024-45855
 details: "Deserialization of untrusted data can occur in versions 23.10.2.0 and newer\
   \ of the MindsDB platform, enabling a maliciously uploaded \u2018inhouse\u2019 model\
   \ to run arbitrary code on the server when using \u2018finetune\u2019 on it."
 id: PYSEC-2024-85
-modified: '2025-10-27T07:48:17.990031Z'
+modified: '2025-11-11T17:23:07.904431Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE