Threats tagged 'ghsa-j5hh-vxj3-7c2j'

A deserialization vulnerability exists in MindsDB up to version 26.01 in the Pickle Handler component's pickle.loads function. This flaw allows remote attackers to manipulate deserialization processes. Public exploit code has been disclosed, but no vendor response or patch is currently available. The vulnerability has a medium severity rating with a CVSS score of 6.3.