CVE-2023-49795 (published 2023-12-11T19:01:00.946Z)
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.

Affected products: Vendor: mindsdb
Product: mindsdb
Versions: < 23.11.4.1