https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:49:17.612195+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-45848 CVE-2024-45848 2026-10-02T15:49:17.613824+00:00

Affected: mindsdb

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server.

 https://cve.radiocsirt.org/vuln/ghsa-9gq6-6936-885w GHSA-9gq6-6936-885w — MindsDB Eval Injection vulnerability 2026-10-02T15:49:17.613879+00:00

Affected: PyPI: mindsdb

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server.