PyPI/mindsql CVE-2026-4506: medium 6.3, EPSS 0.24%
MindSQL is vulnerable to Code Injection through its ask_db function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.2.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m6m4-34cj-4hh7
- https://nvd.nist.gov/vuln/detail/CVE-2026-4506
- https://github.com/Ka7arotto/cve/blob/main/MindSQL-RCE.md
- https://github.com/Mindinventory/MindSQL
- https://vuldb.com/?ctiid.352072
- https://vuldb.com/?id.352072
- https://vuldb.com/?submit.773898
CVE-2026-4506 · published · modified · JSON