Analysis

Author: github-actions

vulns/mindsdb/PYSEC-2023-278.yaml

@@ -590,6 +590,7 @@ affected:
   - 26.0.0rc2
   - 26.0.0rc3
   - 26.0.0
+  - 26.0.1
 aliases:
 - CVE-2023-49796
 - GHSA-crhp-7c74-cg4c
@@ -598,7 +599,7 @@ details: MindsDB connects artificial intelligence models to real time data. Vers
   should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the
   issue.
 id: PYSEC-2023-278
-modified: '2026-02-25T10:47:20.007476Z'
+modified: '2026-03-03T16:29:37.448520Z'
 published: '2023-12-11T21:15:00Z'
 references:
 - type: ADVISORY

vulns/mindsdb/PYSEC-2024-82.yaml

@@ -183,13 +183,14 @@ affected:
   - 26.0.0rc2
   - 26.0.0rc3
   - 26.0.0
+  - 26.0.1
 aliases:
 - CVE-2024-45852
 details: Deserialization of untrusted data can occur in versions 23.3.2.0 and newer
   of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary
   code on the server when interacted with.
 id: PYSEC-2024-82
-modified: '2026-02-25T10:47:20.150040Z'
+modified: '2026-03-03T16:29:37.563380Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE

vulns/mindsdb/PYSEC-2024-83.yaml

@@ -143,13 +143,14 @@ affected:
   - 26.0.0rc2
   - 26.0.0rc3
   - 26.0.0
+  - 26.0.1
 aliases:
 - CVE-2024-45853
 details: "Deserialization of untrusted data can occur in versions 23.10.2.0 and newer\
   \ of the MindsDB platform, enabling a maliciously uploaded \u2018inhouse\u2019 model\
   \ to run arbitrary code on the server when used for a prediction."
 id: PYSEC-2024-83
-modified: '2026-02-25T10:47:20.277592Z'
+modified: '2026-03-03T16:29:37.662671Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE

vulns/mindsdb/PYSEC-2024-84.yaml

@@ -142,14 +142,15 @@ affected:
   - 26.0.0rc2
   - 26.0.0rc3
   - 26.0.0
+  - 26.0.1
 aliases:
 - CVE-2024-45854
 details: "Deserialization of untrusted data can occur in versions 23.10.3.0 and newer\
   \ of the MindsDB platform, enabling a maliciously uploaded \u2018inhouse\u2019 model\
   \ to run arbitrary code on the server when a \u2018describe\u2019 query is run on\
   \ it."
 id: PYSEC-2024-84
-modified: '2026-02-25T10:47:20.405923Z'
+modified: '2026-03-03T16:29:37.756762Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE

vulns/mindsdb/PYSEC-2024-85.yaml

@@ -143,13 +143,14 @@ affected:
   - 26.0.0rc2
   - 26.0.0rc3
   - 26.0.0
+  - 26.0.1
 aliases:
 - CVE-2024-45855
 details: "Deserialization of untrusted data can occur in versions 23.10.2.0 and newer\
   \ of the MindsDB platform, enabling a maliciously uploaded \u2018inhouse\u2019 model\
   \ to run arbitrary code on the server when using \u2018finetune\u2019 on it."
 id: PYSEC-2024-85
-modified: '2026-02-25T10:47:20.527736Z'
+modified: '2026-03-03T16:29:37.848846Z'
 published: '2024-09-12T13:15:00Z'
 references:
 - type: EVIDENCE