MEDIUM6.1PyPI
GHSA-29r9-67vg-qj56· CVE-2026-60087, PYSEC-2026-4265PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments
Modified: 10/15/2026
package
PyPI/praisonaiagents
pkg:pypi/praisonaiagents
HIGH7.5PyPI
GHSA-2rcg-mm5h-xchx· CVE-2026-57129, PYSEC-2026-3527PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
Modified: 7/23/2026
CRITICAL10.0PyPI
GHSA-2xv2-w8cq-5gxw· CVE-2026-61447, PYSEC-2026-4266PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
Modified: 10/15/2026
MEDIUM4.3PyPI
GHSA-35w5-pcw4-jx94· CVE-2026-57128, PYSEC-2026-3528PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
Modified: 7/23/2026
HIGH8.6PyPI
GHSA-44c2-3rw4-5gvh· CVE-2026-34954, PYSEC-2026-2940PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-4869-x4pr-q22x· CVE-2026-57125, PYSEC-2026-3501PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass
Modified: 7/23/2026
HIGH7.8PyPI
GHSA-4gfv-wg42-7jw5· CVE-2026-61437, PYSEC-2026-4267PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow
Modified: 10/15/2026
CRITICAL9.9PyPI
GHSA-4mr5-g6f9-cfrh· CVE-2026-47392, PYSEC-2026-463PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
Modified: 6/29/2026
HIGH8.8PyPI
GHSA-4pcv-mg8v-vrgf· CVE-2026-57143, PYSEC-2026-3530PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
Modified: 7/23/2026
MEDIUM5.7PyPI
GHSA-4xxv-6wmf-xf45· CVE-2026-61432, PYSEC-2026-4268PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace
Modified: 10/15/2026
MEDIUM5.5PyPI
GHSA-5c6w-wwfq-7qqm· CVE-2026-47390, PYSEC-2026-2902PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings
Modified: 7/13/2026
MEDIUM5.5PyPI
GHSA-5cxw-77wg-jrf3· CVE-2026-47395, PYSEC-2026-2903PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-5r34-2g38-6569· CVE-2026-55525, PYSEC-2026-3898praisonaiagents web_crawl vulnerable to SSRF via redirect-following
Modified: 9/10/2026
HIGH8.5PyPI
GHSA-6g59-gm2v-qhvq· CVE-2026-61429, PYSEC-2026-4269PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass
Modified: 10/15/2026
MEDIUM6.5PyPI
GHSA-6h9p-93hq-q7h6· CVE-2026-57115, PYSEC-2026-3531PraisonAI: SpiderTools redirect-target SSRF protection bypass
Modified: 7/23/2026
CRITICAL10.0PyPI
GHSA-6vh2-h83c-9294· CVE-2026-34938, PYSEC-2026-484PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code
Modified: 6/29/2026
MEDIUM6.5PyPI
GHSA-766v-q9x3-g744· CVE-2026-56078, PYSEC-2026-2943PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling
Modified: 7/13/2026
HIGH8.2PyPI
GHSA-7g3p-92qq-8wvh· CVE-2026-55528, PYSEC-2026-3899praisonaiagents: AgentServer declares auth_token but never enforces it on any route
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-7j2f-xc8p-fjmq· CVE-2026-40152, PYSEC-2026-2944PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary
Modified: 7/13/2026
HIGH7.7PyPI
GHSA-8f4v-xfm9-3244· CVE-2026-40150, PYSEC-2026-2945PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
Modified: 7/13/2026
HIGH7.7PyPI
GHSA-8hjw-25cg-g52h· CVE-2026-55523, PYSEC-2026-3900praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
Modified: 9/10/2026
CRITICAL9.1PyPI
GHSA-8x8f-54wf-vv92· CVE-2026-40289, PYSEC-2026-467PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
Modified: 6/29/2026
HIGH8.1PyPI
GHSA-c44f-37qr-gw3f· CVE-2026-61443, PYSEC-2026-4270PraisonAI: SkillTools Executes Scripts Without Path Containment Validation
Modified: 10/15/2026
HIGH8.1PyPI
GHSA-c969-5x3p-vq3v· CVE-2026-57130, PYSEC-2026-3532PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters
Modified: 7/23/2026
MEDIUM6.1PyPI
GHSA-cfxv-8fw8-rwpv· CVE-2026-55530, PYSEC-2026-3901praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
Modified: 9/10/2026
MEDIUM5.5PyPI
GHSA-ffp3-3562-8cv3· CVE-2026-56074, PYSEC-2026-2946PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands
Modified: 9/10/2026
HIGH8.4PyPI
GHSA-g985-wjh9-qxxc· CVE-2026-40287, PYSEC-2026-2914PraisonAI Vulnerable to RCE via Automatic tools.py Import
Modified: 7/13/2026
HIGH8.6PyPI
GHSA-gmjg-hv98-qggq· CVE-2026-44339, PYSEC-2026-2915PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
Modified: 7/13/2026
MEDIUM6.2PyPI
GHSA-grrg-5cg9-58pf· CVE-2026-40117, PYSEC-2026-2949PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-gxmw-5f7x-6g22· CVE-2026-55527, PYSEC-2026-3902praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location
Modified: 9/10/2026
HIGH7.8PyPI
GHSA-hxmv-c4g6-5fqc· CVE-2026-55522, PYSEC-2026-3891PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
Modified: 9/10/2026
HIGH8.4PyPI
GHSA-m6wp-h223-4c8g· CVE-2026-61446, PYSEC-2026-4271PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification
Modified: 10/15/2026
MEDIUM6.5PyPI
GHSA-pv2j-rghr-v5r9· CVE-2026-57120, PYSEC-2026-3533PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder
Modified: 7/23/2026
CRITICAL9.8PyPI
GHSA-q9pw-vmhh-384g· CVE-2026-44335, PYSEC-2026-2950PraisonAI has an SSRF bypass
Modified: 7/13/2026
CRITICAL9.9PyPI
GHSA-qf73-2hrx-xprp· CVE-2026-39888, PYSEC-2026-486PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
Modified: 6/29/2026
HIGH8.5PyPI
GHSA-qg25-6gc4-48mg· CVE-2026-61430, PYSEC-2026-4272PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure
Modified: 10/15/2026
MEDIUM6.9PyPI
GHSA-qjw5-xwrp-xwpq· CVE-2026-60089, PYSEC-2026-4273PraisonAI: Project config can auto-save agent output outside the project root
Modified: 10/15/2026
HIGH7.1PyPI
GHSA-qq9r-63f6-v542· CVE-2026-40160, PYSEC-2026-2951PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback
Modified: 7/13/2026
HIGH8.1PyPI
GHSA-rg3h-x3jw-7jm5· CVE-2026-41496, PYSEC-2026-2923PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
Modified: 7/13/2026
CRITICAL9.3PyPI
GHSA-v7px-3835-7gjx· CVE-2026-40111, PYSEC-2026-487PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
Modified: 6/29/2026
HIGH7.4PyPI
GHSA-v8g7-9q6v-p3x8· CVE-2026-40153, PYSEC-2026-2953PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-vc46-vw85-3wvm· CVE-2026-40288, PYSEC-2026-477PraisonAI has critical RCE via `type: job` workflow YAML
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-vg6p-v9vm-6fgj· CVE-2026-55524, PYSEC-2026-3904praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)
Modified: 9/10/2026
HIGH8.3PyPI
GHSA-vmf9-xx9w-86wx· CVE-2026-57112, PYSEC-2026-3521PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
Modified: 7/23/2026
HIGH8.5PyPI
GHSA-vxgj-xg5c-p4h7· CVE-2026-57126, PYSEC-2026-3535praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS
Modified: 7/23/2026
HIGH7.8PyPI
GHSA-w37c-qqfp-c67f· CVE-2026-34937, PYSEC-2026-2954PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-x227-pf99-vffg· CVE-2026-57123, PYSEC-2026-3536PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
Modified: 7/23/2026
HIGH8.5PyPI
GHSA-x44h-65qv-cw74· CVE-2026-55526, PYSEC-2026-3905praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)
Modified: 9/10/2026
HIGH8.1PyPI
GHSA-x462-jjpc-q4q4PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint
Modified: 9/10/2026
CRITICAL9.8PyPI
GHSA-x8cv-xmq7-p8xp· CVE-2026-57118, PYSEC-2026-3537PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
Modified: 7/23/2026
HIGH8.6PyPI
PYSEC-2026-2940· CVE-2026-34954, GHSA-44c2-3rw4-5gvhPraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2941· CVE-2026-47390, GHSA-5c6w-wwfq-7qqmPraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2942· CVE-2026-47395, GHSA-5cxw-77wg-jrf3PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-2943· CVE-2026-56078, GHSA-766v-q9x3-g744PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2944· CVE-2026-40152, GHSA-7j2f-xc8p-fjmqPraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary
Modified: 7/13/2026
HIGH7.7PyPI
PYSEC-2026-2945· CVE-2026-40150, GHSA-8f4v-xfm9-3244PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2946· CVE-2026-56074, GHSA-ffp3-3562-8cv3PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands
Modified: 10/23/2026
HIGH8.4PyPI
PYSEC-2026-2947· CVE-2026-40287, GHSA-g985-wjh9-qxxcPraisonAI Vulnerable to RCE via Automatic tools.py Import
Modified: 7/13/2026
HIGH8.6PyPI
PYSEC-2026-2948· CVE-2026-44339, GHSA-gmjg-hv98-qggqPraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
Modified: 7/13/2026
MEDIUM6.2PyPI
PYSEC-2026-2949· CVE-2026-40117, GHSA-grrg-5cg9-58pfPraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-2950· CVE-2026-44335, GHSA-q9pw-vmhh-384gPraisonAI has an SSRF bypass
Modified: 7/13/2026
HIGH7.1PyPI
PYSEC-2026-2951· CVE-2026-40160, GHSA-qq9r-63f6-v542PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-2952· CVE-2026-41496, GHSA-rg3h-x3jw-7jm5PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
Modified: 7/13/2026
HIGH7.4PyPI
PYSEC-2026-2953· CVE-2026-40153, GHSA-v8g7-9q6v-p3x8PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
Modified: 7/13/2026
HIGH7.8PyPI
PYSEC-2026-2954· CVE-2026-34937, GHSA-w37c-qqfp-c67fPraisonAI: Shell Injection in run_python() via Unescaped $() Substitution
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-3527· CVE-2026-57129, GHSA-2rcg-mm5h-xchxPraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
Modified: 7/23/2026
MEDIUM4.3PyPI
PYSEC-2026-3528· CVE-2026-57128, GHSA-35w5-pcw4-jx94PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
Modified: 7/23/2026
CRITICAL9.8PyPI
PYSEC-2026-3529· CVE-2026-57125, GHSA-4869-x4pr-q22xPraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass
Modified: 7/23/2026
HIGH8.8PyPI
PYSEC-2026-3530· CVE-2026-57143, GHSA-4pcv-mg8v-vrgfPraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
Modified: 7/23/2026
MEDIUM6.5PyPI
PYSEC-2026-3531· CVE-2026-57115, GHSA-6h9p-93hq-q7h6PraisonAI: SpiderTools redirect-target SSRF protection bypass
Modified: 7/23/2026
HIGH8.1PyPI
PYSEC-2026-3532· CVE-2026-57130, GHSA-c969-5x3p-vq3vPraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters
Modified: 7/23/2026
MEDIUM6.5PyPI
PYSEC-2026-3533· CVE-2026-57120, GHSA-pv2j-rghr-v5r9PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder
Modified: 7/23/2026
HIGH8.3PyPI
PYSEC-2026-3534· CVE-2026-57112, GHSA-vmf9-xx9w-86wxPraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
Modified: 7/23/2026
HIGH8.5PyPI
PYSEC-2026-3535· CVE-2026-57126, GHSA-vxgj-xg5c-p4h7praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS
Modified: 7/23/2026
CRITICAL9.8PyPI
PYSEC-2026-3536· CVE-2026-57123, GHSA-x227-pf99-vffgPraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
Modified: 7/23/2026
CRITICAL9.8PyPI
PYSEC-2026-3537· CVE-2026-57118, GHSA-x8cv-xmq7-p8xpPraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
Modified: 7/23/2026
HIGH7.5PyPI
PYSEC-2026-3898· CVE-2026-55525, GHSA-5r34-2g38-6569praisonaiagents web_crawl vulnerable to SSRF via redirect-following
Modified: 9/10/2026
HIGH8.2PyPI
PYSEC-2026-3899· CVE-2026-55528, GHSA-7g3p-92qq-8wvhpraisonaiagents: AgentServer declares auth_token but never enforces it on any route
Modified: 9/10/2026
HIGH7.7PyPI
PYSEC-2026-3900· CVE-2026-55523, GHSA-8hjw-25cg-g52hpraisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
Modified: 9/10/2026
MEDIUM6.1PyPI
PYSEC-2026-3901· CVE-2026-55530, GHSA-cfxv-8fw8-rwpvpraisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
Modified: 9/10/2026
HIGH7.1PyPI
PYSEC-2026-3902· CVE-2026-55527, GHSA-gxmw-5f7x-6g22praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location
Modified: 9/10/2026
HIGH7.8PyPI
PYSEC-2026-3903· CVE-2026-55522, GHSA-hxmv-c4g6-5fqcPraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
Modified: 9/10/2026
HIGH7.5PyPI
PYSEC-2026-3904· CVE-2026-55524, GHSA-vg6p-v9vm-6fgjpraisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)
Modified: 9/10/2026
HIGH8.5PyPI
PYSEC-2026-3905· CVE-2026-55526, GHSA-x44h-65qv-cw74praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)
Modified: 9/10/2026
MEDIUM6.1PyPI
PYSEC-2026-4265· CVE-2026-60087, GHSA-29r9-67vg-qj56PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments
Modified: 10/15/2026
CRITICAL10.0PyPI
PYSEC-2026-4266· CVE-2026-61447, GHSA-2xv2-w8cq-5gxwPraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
Modified: 10/15/2026
HIGH7.8PyPI
PYSEC-2026-4267· CVE-2026-61437, GHSA-4gfv-wg42-7jw5PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow
Modified: 10/15/2026
MEDIUM5.7PyPI
PYSEC-2026-4268· CVE-2026-61432, GHSA-4xxv-6wmf-xf45PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace
Modified: 10/15/2026
HIGH8.5PyPI
PYSEC-2026-4269· CVE-2026-61429, GHSA-6g59-gm2v-qhvqPraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass
Modified: 10/15/2026
HIGH8.1PyPI
PYSEC-2026-4270· CVE-2026-61443, GHSA-c44f-37qr-gw3fPraisonAI: SkillTools Executes Scripts Without Path Containment Validation
Modified: 10/15/2026
HIGH8.4PyPI
PYSEC-2026-4271· CVE-2026-61446, GHSA-m6wp-h223-4c8gPraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification
Modified: 10/15/2026
HIGH8.5PyPI
PYSEC-2026-4272· CVE-2026-61430, GHSA-qg25-6gc4-48mgPraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure
Modified: 10/15/2026
MEDIUM6.9PyPI
PYSEC-2026-4273· CVE-2026-60089, GHSA-qjw5-xwrp-xwpqPraisonAI: Project config can auto-save agent output outside the project root
Modified: 10/15/2026
CRITICAL9.9PyPI
PYSEC-2026-483· CVE-2026-47392, GHSA-4mr5-g6f9-cfrhPraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
Modified: 7/13/2026
CRITICAL10.0PyPI
PYSEC-2026-484· CVE-2026-34938, GHSA-6vh2-h83c-9294PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code
Modified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-485· CVE-2026-40289, GHSA-8x8f-54wf-vv92PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
Modified: 7/13/2026
CRITICAL9.9PyPI
PYSEC-2026-486· CVE-2026-39888, GHSA-qf73-2hrx-xprpPraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
Modified: 7/13/2026
CRITICAL9.3PyPI
PYSEC-2026-487· CVE-2026-40111, GHSA-v7px-3835-7gjxPraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-488· CVE-2026-40288, GHSA-vc46-vw85-3wvmPraisonAI has critical RCE via `type: job` workflow YAML
Modified: 7/13/2026