mindsdb mindsdb

Name: mindsdb mindsdb
Brand: mindsdb

productUS

cpe:2.3:a:mindsdb:mindsdb:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical13high5medium0low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-68472US	critical9.1	20.3% (97th)	Exploit	25.11.1	2026-01-12	< 25.11.1
CVE-2026-27483US	—	11.0% (96th)	Exploit	25.9.1.1	2026-02-24	< 25.9.1.1
CVE-2024-45846US	high8.8	2.15% (82nd)	Exploit	24.7.4.1	2024-09-12	23.10.3.0 → 24.7.4.1
CVE-2024-24759US	critical9.1	4.94% (92nd)	—	23.12.4.2	2024-09-05	< 23.12.4.2
CVE-2023-30620US	high7.5	0.99% (62nd)	—	no fix	2023-04-21	≤ 23.1.5.0
CVE-2023-50731US	critical9.1	0.98% (62nd)	—	23.11.4.1	2023-12-22	< 23.11.4.1
CVE-2022-23522US	high8.8	0.88% (59th)	—	22.11.4.3	2023-03-30	< 22.11.4.3
CVE-2024-45851US	high8.8	0.87% (59th)	—	24.7.4.1	2024-09-12	23.10.5.0 → 24.7.4.1
CVE-2024-45850US	high8.8	0.87% (59th)	—	24.7.4.1	2024-09-12	23.10.5.0 → 24.7.4.1
CVE-2024-45849US	high8.8	0.87% (59th)	—	24.7.4.1	2024-09-12	23.10.5.0 → 24.7.4.1
CVE-2024-45848US	high8.8	0.85% (58th)	—	24.7.4.1	2024-09-12	23.12.4.0 → 24.7.4.1
CVE-2024-45847US	high8.8	0.85% (58th)	—	24.7.4.1	2024-09-12	23.11.4.2 → 24.7.4.1
CVE-2024-45852US	high8.8	0.69% (52nd)	—	no fix	2024-09-12	≥ 23.3.2.0
CVE-2024-45855US	high7.5	0.51% (43rd)	—	no fix	2024-09-12	≥ 23.10.2.0
CVE-2024-45854US	high7.5	0.51% (43rd)	—	no fix	2024-09-12	≥ 23.10.3.0
CVE-2024-45853US	high7.5	0.51% (43rd)	—	no fix	2024-09-12	≥ 23.10.2.0
CVE-2024-45856US	medium5.4	0.51% (43rd)	—	no fix	2024-09-12	—
CVE-2023-49796US	medium5.3	0.49% (42nd)	—	no fix	2023-12-11	= 23.7.4.1
CVE-2023-49795US	medium5.3	0.42% (36th)	—	23.11.4.1	2023-12-11	< 23.11.4.1
CVE-2024-3575US	medium6.1	0.37% (31st)	—	no fix	2024-04-16	= 23.6.3.1
CVE-2023-38699US	medium6.5OT elevated	0.30% (22nd)	—	23.7.4.0	2023-08-04	< 23.7.4.0
CVE-2026-2531US	high7.3	0.27% (18th)	—	no fix	2026-02-16	≤ 25.14.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')6 CVEs
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-23Relative Path Traversal1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan