{"action":"Upgrade mindsdb to 23.7.4.0 or later.","affected":[{"fixed":"23.7.4.0","introduced":"0"}],"component":"mindsdb","cve_ids":["CVE-2023-38699"],"ecosystem":"PyPI","epss":0.00296,"exploited":false,"fixed_versions":["23.7.4.0"],"ghsa_id":"GHSA-8hx6-qv6f-xgcw","id":"tcs_01M5KF8D0X7R9E2MRHGHYYKX6V","modified_at":"2025-02-13T05:12:47.001967Z","published_at":"2023-08-01T19:55:14Z","references":["https://osv.dev/vulnerability/GHSA-8hx6-qv6f-xgcw","https://github.com/mindsdb/mindsdb/security/advisories/GHSA-8hx6-qv6f-xgcw","https://nvd.nist.gov/vuln/detail/CVE-2023-38699","https://github.com/mindsdb/mindsdb/commit/083afcf6567cf51aa7d89ea892fd97689919053b","https://github.com/mindsdb/mindsdb","https://github.com/mindsdb/mindsdb/releases/tag/v23.7.4.0","https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2023-140.yaml"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-8hx6-qv6f-xgcw","url":"https://osv.dev/vulnerability/GHSA-8hx6-qv6f-xgcw"}],"summary":"MindsDB can be made to not verify SSL certificates"}