{"action":"Upgrade mindsdb to 26.0.0rc1 or later.","affected":[{"fixed":"26.0.0rc1","introduced":"0"}],"component":"mindsdb","cve_ids":["CVE-2026-2531"],"ecosystem":"PyPI","epss":0.00265,"exploited":false,"fixed_versions":["26.0.0rc1"],"ghsa_id":"GHSA-6xw9-2p64-7622","id":"tcs_01M5KHEAJHX99AQNWS0AM9VDNB","modified_at":"2026-06-10T17:02:15.395556594Z","published_at":"2026-02-16T04:15:51.897Z","references":["https://osv.dev/vulnerability/PYSEC-2026-91","https://github.com/mindsdb/mindsdb/","https://vuldb.com/?id.346119","https://vuldb.com/?submit.748219","https://github.com/mindsdb/mindsdb/issues/12163","https://vuldb.com/?ctiid.346119","https://github.com/mindsdb/mindsdb/pull/12213","https://github.com/themavik/mindsdb/commit/74d6f0fd4b630218519a700fbee1c05c7fd4b1ed","https://github.com/advisories/GHSA-6xw9-2p64-7622"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-91","url":"https://osv.dev/vulnerability/PYSEC-2026-91"}],"summary":"A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the component File Upload. Such"}