https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:36:37.835059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07411 bdu:2024-07411 2026-10-02T22:36:37.938758+00:00 bdu:2024-07411 https://cve.radiocsirt.org/vuln/euvd-2026-162799 EUVD-2026-162799 2026-10-02T22:36:37.938799+00:00 EUVD-2026-162799 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45848 fkie_cve-2024-45848 2026-10-02T22:36:37.938814+00:00

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server.

 https://cve.radiocsirt.org/vuln/ghsa-9gq6-6936-885w GHSA-9gq6-6936-885w — MindsDB Eval Injection vulnerability 2026-10-02T22:36:37.938849+00:00

Affected: PyPI: mindsdb

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server.

 https://cve.radiocsirt.org/vuln/pysec-2024-78 PYSEC-2024-78 2026-10-02T22:36:37.938875+00:00

Affected: PyPI: mindsdb

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server.