PyPI/mindsdb CVE-2026-2531: medium 6.3, EPSS 0.27%

MindsDB affected by a SSRF vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-6xw9-2p64-7622
• https://nvd.nist.gov/vuln/detail/CVE-2026-2531
• https://github.com/mindsdb/mindsdb/issues/12163
• https://github.com/mindsdb/mindsdb/pull/12213
• https://github.com/themavik/mindsdb/commit/74d6f0fd4b630218519a700fbee1c05c7fd4b1ed
• https://github.com/mindsdb/mindsdb
• https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2026-91.yaml
• https://vuldb.com/?ctiid.346119
• https://vuldb.com/?id.346119
• https://vuldb.com/?submit.748219

CVE-2026-2531 · published 2026-02-16T06:31:29Z · modified 2026-06-06T00:45:47.099106199Z · JSON