GHSA-6xw9-2p64-7622
Medium · 6.3CVSS
6.3
EPSS
—
Published
Feb 16, 2026
CISA due date
—
The record
MindsDB affected by a SSRF vulnerability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | mindsdb | 0 | No fix |
Related vulnerabilities
- CVE-2026-2531 A security vulnerability has been detected in MindsDB up to 25.14.1. Same vulnerability
- GHSA-4894-xqv6-vrfq MindsDB: Path Traversal in /api/files Leading to Remote Code Execution Also affects mindsdb
- CVE-2026-27483 MindsDB is a platform for building artificial intelligence from enterprise data. Also affects mindsdb
- CVE-2025-68472 MindsDB is a platform for building artificial intelligence from enterprise data. Also affects mindsdb
- GHSA-qqhf-pm3j-96g7 MindsDB has improper sanitation of filepath that leads to information disclosure and DOS Also affects mindsdb
- CVE-2026-114730 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a… CWE-918
- CVE-2026-87953 Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider… CWE-918
- CVE-2026-114634 WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in… CWE-918