PraisonAI (PyPI)
Advisories
227
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 4.6.78 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "PraisonAI>=4.6.78"poetry
poetry add "PraisonAI>=4.6.78"uv
uv add "PraisonAI>=4.6.78"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-26mh-57q7-jfvr PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox |
High EPSS 0.31% |
< 4.6.78 | 4.6.78 |
| GHSA-6g6r-q6gw-w8fg PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92) |
Critical EPSS 0.52% |
< 4.6.58 | 4.6.58 |
| GHSA-6g6r-q6gw-w8fg PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92) |
Critical EPSS 0.52% |
< 4.6.58 | 4.6.58 |
| GHSA-pvph-5j39-v8qc PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server |
High EPSS 0.20% |
< 4.6.58 | 4.6.58 |
| GHSA-pvph-5j39-v8qc PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server |
High EPSS 0.20% |
< 4.6.58 | 4.6.58 |
| GHSA-gfq8-hmph-9gjv PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret |
High EPSS 0.49% |
< 4.6.58 | 4.6.58 |
| GHSA-gfq8-hmph-9gjv PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret |
High EPSS 0.49% |
< 4.6.58 | 4.6.58 |
| GHSA-2jgc-f764-c5r2 PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete |
High EPSS 0.57% |
< 4.6.58 | 4.6.58 |
| GHSA-2jgc-f764-c5r2 PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete |
High EPSS 0.57% |
< 4.6.58 | 4.6.58 |
| GHSA-pvxx-r596-f5qj PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced |
High EPSS 0.48% |
< 4.6.58 | 4.6.58 |
| GHSA-pvxx-r596-f5qj PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced |
High EPSS 0.48% |
< 4.6.58 | 4.6.58 |
| GHSA-hmfx-4v44-9qw9 PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation |
Medium EPSS 0.34% |
< 4.6.58 | 4.6.58 |
| GHSA-hmfx-4v44-9qw9 PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation |
Medium EPSS 0.34% |
< 4.6.58 | 4.6.58 |
| GHSA-rg5q-pp8p-f7jm PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114 |
High EPSS 0.27% |
< 4.6.58 | 4.6.58 |
| GHSA-rg5q-pp8p-f7jm PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114 |
High EPSS 0.27% |
< 4.6.58 | 4.6.58 |
| GHSA-r7v3-x45f-g7hp PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated |
High EPSS 0.45% |
< 4.6.58 | 4.6.58 |
| GHSA-r7v3-x45f-g7hp PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated |
High EPSS 0.45% |
< 4.6.58 | 4.6.58 |
| GHSA-ch89-h4r2-c8f8 PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks |
High EPSS 0.39% |
< 4.6.58 | 4.6.58 |
| GHSA-ch89-h4r2-c8f8 PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks |
High EPSS 0.39% |
< 4.6.58 | 4.6.58 |
| GHSA-7ww9-85pg-cv4x PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution |
High EPSS 0.45% |
>= 4.6.34, < 4.6.58 | 4.6.58 |
| GHSA-7ww9-85pg-cv4x PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution |
High EPSS 0.45% |
>= 4.6.34, < 4.6.58 | 4.6.58 |
| GHSA-wv94-5qcp-6m36 PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced) |
Medium EPSS 0.45% |
< 4.6.58 | 4.6.58 |
| GHSA-wv94-5qcp-6m36 PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced) |
Medium EPSS 0.45% |
< 4.6.58 | 4.6.58 |
| GHSA-wj6g-v78p-6fx3 PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server |
Medium EPSS 0.18% |
< 4.6.58 | 4.6.58 |
| GHSA-wj6g-v78p-6fx3 PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server |
Medium EPSS 0.18% |
< 4.6.58 | 4.6.58 |
| GHSA-hxmv-c4g6-5fqc PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code |
High EPSS 0.22% |
>= 3.9.26, < 4.6.58 | 4.6.58 |
| GHSA-hxmv-c4g6-5fqc PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code |
High EPSS 0.22% |
>= 3.9.26, < 4.6.58 | 4.6.58 |
| GHSA-qh3g-555w-f82q Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox Withdrawn |
High | < 4.6.78 | 4.6.78 |
| GHSA-qh3g-555w-f82q Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox Withdrawn |
High | all versions | No fix yet |
| GHSA-5866-9272-qcfv Duplicate Advisory: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-65c8-r727-2mpj Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-m64w-vfg6-36ph Duplicate Advisory: PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-qpq9-hwx9-cwgc Duplicate Advisory: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-gp65-m7q3-4vjw Duplicate Advisory: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-7c92-x8vg-4258 PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents |
High EPSS 0.39% |
< 4.6.78 | 4.6.78 |
| GHSA-7c92-x8vg-4258 PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents |
High EPSS 0.39% |
< 4.6.78 | 4.6.78 |
| GHSA-2gpf-2492-q9jh PraisonAI: Call API localhost-only authentication bypass via spoofed Host header |
High EPSS 0.49% |
< 4.6.78 | 4.6.78 |
| GHSA-2gpf-2492-q9jh PraisonAI: Call API localhost-only authentication bypass via spoofed Host header |
High EPSS 0.49% |
< 4.6.78 | 4.6.78 |
| GHSA-79fv-7hq9-w7xg PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source |
High EPSS 0.21% |
< 4.6.78 | 4.6.78 |
| GHSA-79fv-7hq9-w7xg PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source |
High EPSS 0.21% |
< 4.6.78 | 4.6.78 |
| GHSA-hc5v-gxvj-58wh PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface |
Medium EPSS 0.43% |
< 4.6.78 | 4.6.78 |
| GHSA-hc5v-gxvj-58wh PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface |
Medium EPSS 0.43% |
< 4.6.78 | 4.6.78 |
| GHSA-5r6c-gj4g-r697 PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend |
High EPSS 0.26% |
< 4.6.78 | 4.6.78 |
| GHSA-5r6c-gj4g-r697 PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend |
High EPSS 0.26% |
< 4.6.78 | 4.6.78 |
| GHSA-q65p-7p84-495c Duplicate Advisory: PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL Withdrawn |
Critical | <= 4.6.77 | No fix yet |
| GHSA-wgvq-3jxh-4qg7 Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts Withdrawn |
Medium | <= 4.6.77 | No fix yet |
| GHSA-4mp6-8448-9vgv Duplicate Advisory: PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-wj29-gm8v-33x8 Duplicate Advisory: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls Withdrawn |
Critical | <= 4.6.77 | No fix yet |
| GHSA-5r2q-3wg3-57m2 Duplicate Advisory: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-mhgx-w3w5-2rvc Duplicate Advisory: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets Withdrawn |
Critical | <= 1.6.77 | No fix yet |
| GHSA-9mp3-24cc-77mg PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls |
Critical EPSS 0.64% |
< 4.6.78 | 4.6.78 |
| GHSA-9mp3-24cc-77mg PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls |
Critical EPSS 0.64% |
< 4.6.78 | 4.6.78 |
| GHSA-fj8f-m44g-c479 PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats |
High EPSS 0.34% |
< 4.6.78 | 4.6.78 |
| GHSA-fj8f-m44g-c479 PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats |
High EPSS 0.34% |
< 4.6.78 | 4.6.78 |
| GHSA-qj9c-59p6-8cgx PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing |
Medium EPSS 0.31% |
< 4.6.78 | 4.6.78 |
| GHSA-qj9c-59p6-8cgx PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing |
Medium EPSS 0.31% |
< 4.6.78 | 4.6.78 |
| GHSA-wf65-4jjx-q444 PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL |
Critical EPSS 0.70% |
< 4.6.78 | 4.6.78 |
| GHSA-wf65-4jjx-q444 PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL |
Critical EPSS 0.70% |
< 4.6.78 | 4.6.78 |
| GHSA-xpx6-x8c2-mw5w PraisonAI: Project custom command templates can read outside-workspace files into model prompts |
Medium EPSS 0.22% |
< 4.6.78 | 4.6.78 |
| GHSA-xpx6-x8c2-mw5w PraisonAI: Project custom command templates can read outside-workspace files into model prompts |
Medium EPSS 0.22% |
< 4.6.78 | 4.6.78 |
| GHSA-wrw8-384c-cg76 Duplicate Advisory: PraisonAI: Shell command allowlist bypass via find -exec built-in action Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-5c3v-h6hw-4gx7 Duplicate Advisory: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked Withdrawn |
Medium | <= 4.6.77 | No fix yet |
| GHSA-w37c-cq55-frjp Duplicate Advisory: PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace Withdrawn |
Medium | <= 4.6.77 | No fix yet |
| GHSA-3wrm-pm5v-8vq8 Duplicate Advisory: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF Withdrawn |
High | <= 4.6.77 | No fix yet |
| GHSA-g6j7-pffp-8whg PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation |
Critical EPSS 0.50% |
< 4.6.78 | 4.6.78 |
| GHSA-g6j7-pffp-8whg PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation |
Critical EPSS 0.50% |
< 4.6.78 | 4.6.78 |
| GHSA-cv3g-hj65-pcfh PraisonAI: Shell command allowlist bypass via find -exec built-in action |
High EPSS 0.73% |
< 4.6.78 | 4.6.78 |
| GHSA-cv3g-hj65-pcfh PraisonAI: Shell command allowlist bypass via find -exec built-in action |
High EPSS 0.73% |
< 4.6.78 | 4.6.78 |
| GHSA-q7m5-3jmv-vm48 PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace |
Medium EPSS 0.37% |
< 4.6.78 | 4.6.78 |
| GHSA-q7m5-3jmv-vm48 PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace |
Medium EPSS 0.37% |
< 4.6.78 | 4.6.78 |
| GHSA-4w49-gwv8-fpjg PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF |
Medium EPSS 0.22% |
< 4.6.78 | 4.6.78 |
| GHSA-4w49-gwv8-fpjg PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF |
Medium EPSS 0.22% |
< 4.6.78 | 4.6.78 |
| GHSA-4r3p-w3mc-5v34 PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked |
Medium EPSS 0.27% |
< 4.6.78 | 4.6.78 |
| GHSA-4r3p-w3mc-5v34 PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked |
Medium EPSS 0.27% |
< 4.6.78 | 4.6.78 |
| GHSA-fwh2-95jw-g4j6 Duplicate Advisory: PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling Withdrawn |
High | <= 1.5.114 | No fix yet |
| GHSA-x44p-gg67-52fc Duplicate Advisory: PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands Withdrawn |
Medium | all versions | No fix yet |
| GHSA-6jcq-6546-qrrw PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable |
High EPSS 0.21% |
>= 4.5.110, < 4.6.61 | 4.6.61 |
| GHSA-6jcq-6546-qrrw PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable |
High EPSS 0.21% |
>= 4.5.110, < 4.6.61 | 4.6.61 |
| GHSA-8ccj-p46r-jwqq PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication |
High EPSS 0.51% |
< 4.6.61 | 4.6.61 |
| GHSA-8ccj-p46r-jwqq PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication |
High EPSS 0.51% |
< 4.6.61 | 4.6.61 |
| GHSA-29w3-p9w9-wc47 PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation |
Critical EPSS 0.54% |
< 4.6.61 | 4.6.61 |
| GHSA-29w3-p9w9-wc47 PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation |
Critical EPSS 0.54% |
< 4.6.61 | 4.6.61 |
| GHSA-jxcw-qp4h-6jfq PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default |
High EPSS 0.49% |
>= 4.5.115, < 4.6.61 | 4.6.61 |
| GHSA-jxcw-qp4h-6jfq PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default |
High EPSS 0.49% |
>= 4.5.115, < 4.6.61 | 4.6.61 |
| GHSA-7qw2-w5rc-37x2 PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml |
High EPSS 0.24% |
>= 4.5.87, < 4.6.61 | 4.6.61 |
| GHSA-7qw2-w5rc-37x2 PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml |
High EPSS 0.24% |
>= 4.5.87, < 4.6.61 | 4.6.61 |
| GHSA-f44v-7qgw-9gh9 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion |
High EPSS 0.40% |
>= 2.6.0, < 4.6.59 | 4.6.59 |
| GHSA-f44v-7qgw-9gh9 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion |
High EPSS 0.40% |
>= 2.6.0, < 4.6.59 | 4.6.59 |
| GHSA-gcq3-mfvh-3x25 PraisonAI Code agent tools fail open without a workspace boundary |
High EPSS 0.38% |
< 4.6.59 | 4.6.59 |
| GHSA-gcq3-mfvh-3x25 PraisonAI Code agent tools fail open without a workspace boundary |
High EPSS 0.38% |
< 4.6.59 | 4.6.59 |
| GHSA-p75f-6fp4-p57w PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai |
Critical EPSS 1.03% |
< 4.6.59 | 4.6.59 |
| GHSA-p75f-6fp4-p57w PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai |
Critical EPSS 1.03% |
< 4.6.59 | 4.6.59 |
| GHSA-x92v-rpx6-p6cw PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots) |
High EPSS 0.19% |
< 4.6.59 | 4.6.59 |
| GHSA-x92v-rpx6-p6cw PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots) |
High EPSS 0.19% |
< 4.6.59 | 4.6.59 |
| GHSA-892r-p3jq-jp24 PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation |
Critical EPSS 0.42% |
>= 4.2.1, < 4.6.59 | 4.6.59 |
| GHSA-892r-p3jq-jp24 PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation |
Critical EPSS 0.42% |
>= 4.2.1, < 4.6.59 | 4.6.59 |
| GHSA-rjvw-7vvw-549v PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding |
High EPSS 0.26% |
>= 4.5.126, < 4.6.59 | 4.6.59 |
| GHSA-rjvw-7vvw-549v PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding |
High EPSS 0.26% |
>= 4.5.126, < 4.6.59 | 4.6.59 |
| GHSA-fq2m-6wqh-x44g PraisonAI: Jobs API exposes agent-execution endpoints with no authentication |
Critical EPSS 0.97% |
< 4.6.59 | 4.6.59 |
| GHSA-fq2m-6wqh-x44g PraisonAI: Jobs API exposes agent-execution endpoints with no authentication |
Critical EPSS 0.97% |
< 4.6.59 | 4.6.59 |
| GHSA-j4hj-7hfh-g2f4 praisonai: recipe serve auth middleware silently disables itself when no secret is set |
Critical EPSS 0.90% |
< 4.6.59 | 4.6.59 |
| GHSA-j4hj-7hfh-g2f4 praisonai: recipe serve auth middleware silently disables itself when no secret is set |
Critical EPSS 0.90% |
< 4.6.59 | 4.6.59 |
| GHSA-4869-x4pr-q22x PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass |
Critical EPSS 0.60% |
< 4.6.59 | 4.6.59 |
| GHSA-4869-x4pr-q22x PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass |
Critical EPSS 0.60% |
< 4.6.59 | 4.6.59 |
| GHSA-p4pj-vh7h-6cqh PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API |
High EPSS 0.53% |
< 4.6.59 | 4.6.59 |
| GHSA-p4pj-vh7h-6cqh PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API |
High EPSS 0.53% |
< 4.6.59 | 4.6.59 |
| GHSA-w6h2-fr4q-xvxv PraisonAI: Compute-bridged file tools allow shell command injection |
High EPSS 0.58% |
>= 4.6.10, < 4.6.59 | 4.6.59 |
| GHSA-w6h2-fr4q-xvxv PraisonAI: Compute-bridged file tools allow shell command injection |
High EPSS 0.58% |
>= 4.6.10, < 4.6.59 | 4.6.59 |
| GHSA-v847-hxxw-3pxg PraisonAI recipe.run_stream skips dangerous-tool policy enforcement |
High EPSS 0.15% |
>= 4.5.87, < 4.6.59 | 4.6.59 |
| GHSA-v847-hxxw-3pxg PraisonAI recipe.run_stream skips dangerous-tool policy enforcement |
High EPSS 0.15% |
>= 4.5.87, < 4.6.59 | 4.6.59 |
| GHSA-63v4-w882-g4x2 PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools |
High EPSS 0.38% |
>= 4.5.2, < 4.6.59 | 4.6.59 |
| GHSA-63v4-w882-g4x2 PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools |
High EPSS 0.38% |
>= 4.5.2, < 4.6.59 | 4.6.59 |
| GHSA-fc26-m9pf-v56q PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing |
High EPSS 0.19% |
>= 4.6.56, < 4.6.59 | 4.6.59 |
| GHSA-fc26-m9pf-v56q PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing |
High EPSS 0.19% |
>= 4.6.56, < 4.6.59 | 4.6.59 |
| GHSA-j7qx-p75m-wp7g PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage |
High EPSS 0.37% |
>= 3.8.1, < 4.6.59 | 4.6.59 |
| GHSA-j7qx-p75m-wp7g PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage |
High EPSS 0.37% |
>= 3.8.1, < 4.6.59 | 4.6.59 |
| GHSA-qvpf-j64c-jmhr PraisonAI Slack app_mention bypasses configured user/channel authorization |
High EPSS 0.21% |
>= 3.11.0, < 4.6.59 | 4.6.59 |
| GHSA-qvpf-j64c-jmhr PraisonAI Slack app_mention bypasses configured user/channel authorization |
High EPSS 0.21% |
>= 3.11.0, < 4.6.59 | 4.6.59 |
| GHSA-5qw8-f2g9-ff29 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard |
High EPSS 0.33% |
>= 4.5.112, < 4.6.59 | 4.6.59 |
| GHSA-5qw8-f2g9-ff29 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard |
High EPSS 0.33% |
>= 4.5.112, < 4.6.59 | 4.6.59 |
| GHSA-vmf9-xx9w-86wx PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools |
High EPSS 0.22% |
>= 3.10.0, < 4.6.59 | 4.6.59 |
| GHSA-vmf9-xx9w-86wx PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools |
High EPSS 0.22% |
>= 3.10.0, < 4.6.59 | 4.6.59 |
| GHSA-22cj-m4wf-fv2c PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal |
High EPSS 0.46% |
>= 3.8.1, < 4.6.59 | 4.6.59 |
| GHSA-22cj-m4wf-fv2c PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal |
High EPSS 0.46% |
>= 3.8.1, < 4.6.59 | 4.6.59 |
| GHSA-8579-rgg5-ph2m PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals |
High EPSS 0.15% |
>= 4.5.2, < 4.6.59 | 4.6.59 |
| GHSA-8579-rgg5-ph2m PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals |
High EPSS 0.15% |
>= 4.5.2, < 4.6.59 | 4.6.59 |
| GHSA-hvhp-v2gc-268q PraisonAI has an Arbitrary File Write in Python API |
High EPSS 0.46% |
< 4.6.40 | 4.6.40 |
| GHSA-hvhp-v2gc-268q PraisonAI has an Arbitrary File Write in Python API |
High EPSS 0.46% |
< 4.6.40 | 4.6.40 |
| GHSA-vg22-4gmj-prxw PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution |
Critical EPSS 1.50% |
< 4.6.40 | 4.6.40 |
| GHSA-vg22-4gmj-prxw PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution |
Critical EPSS 1.50% |
< 4.6.40 | 4.6.40 |
| GHSA-9cr9-25q5-8prj PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate |
High EPSS 0.50% |
< 4.6.40 | 4.6.40 |
| GHSA-9cr9-25q5-8prj PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate |
High EPSS 0.50% |
< 4.6.40 | 4.6.40 |
| GHSA-4mr5-g6f9-cfrh PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) |
Critical EPSS 0.88% |
< 4.6.40 | 4.6.40 |
| GHSA-4mr5-g6f9-cfrh PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) |
Critical EPSS 0.88% |
< 4.6.40 | 4.6.40 |
| GHSA-5cxw-77wg-jrf3 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context |
Medium EPSS 0.18% |
< 4.6.40 | 4.6.40 |
| GHSA-5cxw-77wg-jrf3 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context |
Medium EPSS 0.18% |
< 4.6.40 | 4.6.40 |
| GHSA-8444-4fhq-fxpq PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default |
Critical EPSS 0.58% |
< 4.6.40 | 4.6.40 |
| GHSA-8444-4fhq-fxpq PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default |
Critical EPSS 0.58% |
< 4.6.40 | 4.6.40 |
| GHSA-86qc-r5v2-v6x6 PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset |
Critical EPSS 0.43% |
< 4.6.40 | 4.6.40 |
| GHSA-86qc-r5v2-v6x6 PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset |
Critical EPSS 0.43% |
< 4.6.40 | 4.6.40 |
| GHSA-5c6w-wwfq-7qqm PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings |
Medium EPSS 0.18% |
< 4.6.40 | 4.6.40 |
| GHSA-5c6w-wwfq-7qqm PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings |
Medium EPSS 0.18% |
< 4.6.40 | 4.6.40 |
| GHSA-78r8-wwqv-r299 PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334 |
Critical EPSS 0.71% |
< 4.6.40 | 4.6.40 |
| GHSA-78r8-wwqv-r299 PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334 |
Critical EPSS 0.71% |
< 4.6.40 | 4.6.40 |
| GHSA-9q28-ghcr-c4x3 PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir` |
High EPSS 0.43% |
< 4.6.37 | 4.6.37 |
| GHSA-9q28-ghcr-c4x3 PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir` |
High EPSS 0.43% |
< 4.6.37 | 4.6.37 |
| GHSA-gmjg-hv98-qggq PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute |
High EPSS 0.36% |
< 4.6.37 | 4.6.37 |
| GHSA-gmjg-hv98-qggq PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute |
High EPSS 0.36% |
< 4.6.37 | 4.6.37 |
| GHSA-6rmh-7xcm-cpxj PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution |
High EPSS 32.59% |
>= 2.5.6, < 4.6.34 | 4.6.34 |
| GHSA-6rmh-7xcm-cpxj PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution |
High EPSS 32.59% |
>= 2.5.6, < 4.6.34 | 4.6.34 |
| GHSA-3643-7v76-5cj2 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries |
Medium EPSS 0.22% |
>= 2.4.1, < 4.6.34 | 4.6.34 |
| GHSA-3643-7v76-5cj2 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries |
Medium EPSS 0.22% |
>= 2.4.1, < 4.6.34 | 4.6.34 |
| GHSA-9mqq-jqxf-grvw PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection |
Critical EPSS 0.62% |
< 4.6.34 | 4.6.34 |
| GHSA-9mqq-jqxf-grvw PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection |
Critical EPSS 0.62% |
< 4.6.34 | 4.6.34 |
| GHSA-xcmw-grxf-wjhj PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass) |
High EPSS 0.25% |
>= 4.5.139, < 4.6.32 | 4.6.32 |
| GHSA-xcmw-grxf-wjhj PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass) |
High EPSS 0.25% |
>= 4.5.139, < 4.6.32 | 4.6.32 |
| GHSA-rg3h-x3jw-7jm5 PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) |
High EPSS 0.35% |
< 4.5.149 | 4.5.149 |
| GHSA-rg3h-x3jw-7jm5 PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) |
High EPSS 0.35% |
< 4.5.149 | 4.5.149 |
| GHSA-9qhq-v63v-fv3j PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection |
Critical EPSS 0.54% |
< 4.5.149 | 4.5.149 |
| GHSA-9qhq-v63v-fv3j PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection |
Critical EPSS 0.54% |
< 4.5.149 | 4.5.149 |
| GHSA-8x8f-54wf-vv92 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions |
Critical EPSS 0.42% |
< 4.5.139 | 4.5.139 |
| GHSA-8x8f-54wf-vv92 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions |
Critical EPSS 0.42% |
< 4.5.139 | 4.5.139 |
| GHSA-vc46-vw85-3wvm PraisonAI has critical RCE via `type: job` workflow YAML |
Critical EPSS 0.61% |
< 4.5.139 | 4.5.139 |
| GHSA-vc46-vw85-3wvm PraisonAI has critical RCE via `type: job` workflow YAML |
Critical EPSS 0.61% |
< 4.5.139 | 4.5.139 |
| GHSA-g985-wjh9-qxxc PraisonAI Vulnerable to RCE via Automatic tools.py Import |
High EPSS 0.25% |
< 4.5.139 | 4.5.139 |
| GHSA-g985-wjh9-qxxc PraisonAI Vulnerable to RCE via Automatic tools.py Import |
High EPSS 0.25% |
< 4.5.139 | 4.5.139 |
| GHSA-x783-xp3g-mqhp PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries |
Critical EPSS 0.30% |
< 4.5.133 | 4.5.133 |
| GHSA-x783-xp3g-mqhp PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries |
Critical EPSS 0.30% |
< 4.5.133 | 4.5.133 |
| GHSA-qwgj-rrpj-75xm PraisonAI: Hardcoded `approval_mode="auto"` in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command Execution |
High EPSS 0.60% |
< 4.5.128 | 4.5.128 |
| GHSA-pj2r-f9mw-vrcq PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution |
Medium EPSS 0.18% |
< 4.5.128 | 4.5.128 |
| GHSA-pj2r-f9mw-vrcq PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution |
Medium EPSS 0.18% |
< 4.5.128 | 4.5.128 |
| GHSA-3c4r-6p77-xwr7 PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure |
High EPSS 0.24% |
< 4.5.128 | 4.5.128 |
| GHSA-3c4r-6p77-xwr7 PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure |
High EPSS 0.24% |
< 4.5.128 | 4.5.128 |
| GHSA-99g3-w8gr-x37c PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack` |
High EPSS 0.38% |
>= 2.7.2, < 4.5.128 | 4.5.128 |
| GHSA-99g3-w8gr-x37c PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack` |
High EPSS 0.38% |
>= 2.7.2, < 4.5.128 | 4.5.128 |
| GHSA-2g3w-cpc4-chr4 PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading |
High EPSS 0.21% |
< 4.5.128 | 4.5.128 |
| GHSA-2g3w-cpc4-chr4 PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading |
High EPSS 0.21% |
< 4.5.128 | 4.5.128 |
| GHSA-pv9q-275h-rh7x PraisonAI Vulnerable Untrusted Remote Template Code Execution |
Critical EPSS 0.30% |
< 4.5.128 | 4.5.128 |
| GHSA-pv9q-275h-rh7x PraisonAI Vulnerable Untrusted Remote Template Code Execution |
Critical EPSS 0.30% |
< 4.5.128 | 4.5.128 |
| GHSA-pm96-6xpr-978x PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS |
Medium EPSS 0.76% |
< 4.5.128 | 4.5.128 |
| GHSA-pm96-6xpr-978x PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS |
Medium EPSS 0.76% |
< 4.5.128 | 4.5.128 |
| GHSA-4wr3-f4p3-5wjh PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls |
High EPSS 0.23% |
< 4.5.128 | 4.5.128 |
| GHSA-4wr3-f4p3-5wjh PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls |
High EPSS 0.23% |
< 4.5.128 | 4.5.128 |
| GHSA-f2h6-7xfr-xm8w PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits |
Medium EPSS 0.24% |
< 4.5.128 | 4.5.128 |
| GHSA-f2h6-7xfr-xm8w PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits |
Medium EPSS 0.24% |
< 4.5.128 | 4.5.128 |
| GHSA-q5r4-47m9-5mc7 PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits |
High EPSS 0.37% |
< 4.5.128 | 4.5.128 |
| GHSA-q5r4-47m9-5mc7 PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits |
High EPSS 0.37% |
< 4.5.128 | 4.5.128 |
| GHSA-2xgv-5cv2-47vv PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS |
High EPSS 0.33% |
< 4.5.128 | 4.5.128 |
| GHSA-2xgv-5cv2-47vv PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS |
High EPSS 0.33% |
< 4.5.128 | 4.5.128 |
| GHSA-8frj-8q3m-xhgm PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API |
Critical EPSS 0.24% |
< 4.5.128 | 4.5.128 |
| GHSA-8frj-8q3m-xhgm PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API |
Critical EPSS 0.24% |
< 4.5.128 | 4.5.128 |
| GHSA-fvxx-ggmx-3cjg PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars |
High EPSS 0.23% |
< 4.5.128 | 4.5.128 |
| GHSA-fvxx-ggmx-3cjg PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars |
High EPSS 0.23% |
< 4.5.128 | 4.5.128 |
| GHSA-cfg2-mxfj-j6pw PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency) |
Medium EPSS 0.22% |
< 4.5.128 | 4.5.128 |
| GHSA-cfg2-mxfj-j6pw PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency) |
Medium EPSS 0.22% |
< 4.5.128 | 4.5.128 |
| GHSA-2763-cj5r-c79m PraisonAI Vulnerable to OS Command Injection |
Critical EPSS 0.42% |
< 4.5.121 | 4.5.121 |
| GHSA-2763-cj5r-c79m PraisonAI Vulnerable to OS Command Injection |
Critical EPSS 0.42% |
< 4.5.121 | 4.5.121 |
| GHSA-hwg5-x759-7wjg PraisonAI has Template Injection in Agent Tool Definitions |
High EPSS 0.56% |
< 4.5.115 | 4.5.115 |
| GHSA-hwg5-x759-7wjg PraisonAI has Template Injection in Agent Tool Definitions |
High EPSS 0.56% |
< 4.5.115 | 4.5.115 |
| GHSA-f292-66h9-fpmf PraisonAI Has Unauthenticated SSE Event Stream that Exposes All Agent Activity in A2U Server |
High EPSS 0.42% |
< 4.5.115 | 4.5.115 |
| GHSA-f292-66h9-fpmf PraisonAI Has Unauthenticated SSE Event Stream that Exposes All Agent Activity in A2U Server |
High EPSS 0.42% |
< 4.5.115 | 4.5.115 |
| GHSA-32vr-5gcf-3pw2 PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading |
Critical EPSS 0.58% |
< 4.5.115 | 4.5.115 |
| GHSA-32vr-5gcf-3pw2 PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading |
Critical EPSS 0.58% |
< 4.5.115 | 4.5.115 |
| GHSA-693f-pf34-72c5 PraisonAI Has Path Traversal in FileTools |
High EPSS 0.42% |
< 1.5.113 | 1.5.113 |
| GHSA-693f-pf34-72c5 PraisonAI Has Path Traversal in FileTools |
High EPSS 0.42% |
< 1.5.113 | 1.5.113 |
| GHSA-r9x3-wx45-2v7f PraisonAI recipe registry publish path traversal allows out-of-root file write |
High EPSS 0.33% |
< 4.5.113 | 4.5.113 |
| GHSA-r9x3-wx45-2v7f PraisonAI recipe registry publish path traversal allows out-of-root file write |
High EPSS 0.33% |
< 4.5.113 | 4.5.113 |
| GHSA-4rx4-4r3x-6534 PraisonAI recipe registry pull path traversal writes files outside the chosen output directory |
High EPSS 0.29% |
< 4.5.113 | 4.5.113 |
| GHSA-4rx4-4r3x-6534 PraisonAI recipe registry pull path traversal writes files outside the chosen output directory |
High EPSS 0.29% |
< 4.5.113 | 4.5.113 |
| GHSA-jfxc-v5g9-38xr PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator |
Critical EPSS 0.31% |
< 4.5.113 | 4.5.113 |
| GHSA-jfxc-v5g9-38xr PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator |
Critical EPSS 0.31% |
< 4.5.113 | 4.5.113 |
| GHSA-4ph2-f6pf-79wv PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction |
High EPSS 0.31% |
< 4.5.113 | 4.5.113 |
| GHSA-4ph2-f6pf-79wv PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction |
High EPSS 0.31% |
< 4.5.113 | 4.5.113 |
| GHSA-98f9-fqg5-hvq5 PraisonAI Has Authentication Bypass via OAuthManager.validate_token() |
Critical EPSS 0.39% |
< 4.5.97 | 4.5.97 |
| GHSA-98f9-fqg5-hvq5 PraisonAI Has Authentication Bypass via OAuthManager.validate_token() |
Critical EPSS 0.39% |
< 4.5.97 | 4.5.97 |
| GHSA-cfh6-vr3j-qc3g PraisonAI Has Missing Authentication in WebSocket Gateway |
Critical EPSS 0.45% |
< 4.5.97 | 4.5.97 |
| GHSA-cfh6-vr3j-qc3g PraisonAI Has Missing Authentication in WebSocket Gateway |
Critical EPSS 0.45% |
< 4.5.97 | 4.5.97 |
| GHSA-r4f2-3m54-pp7q PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox |
Critical EPSS 0.39% |
< 4.5.97 | 4.5.97 |
| GHSA-r4f2-3m54-pp7q PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox |
Critical EPSS 0.39% |
< 4.5.97 | 4.5.97 |
| GHSA-x6m9-gxvr-7jpv PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback |
High EPSS 0.35% |
< 4.5.90 | 4.5.90 |
| GHSA-x6m9-gxvr-7jpv PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback |
High EPSS 0.35% |
< 4.5.90 | 4.5.90 |
| GHSA-8w9j-hc3g-3g7f PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools() |
High EPSS 0.42% |
< 4.5.90 | 4.5.90 |
| GHSA-8w9j-hc3g-3g7f PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools() |
High EPSS 0.42% |
< 4.5.90 | 4.5.90 |
| GHSA-9cq8-3v94-434g PraisonAI Has Second-Order SQL Injection in `get_all_user_threads` |
Critical EPSS 0.54% |
< 4.5.90 | 4.5.90 |
| GHSA-9cq8-3v94-434g PraisonAI Has Second-Order SQL Injection in `get_all_user_threads` |
Critical EPSS 0.54% |
< 4.5.90 | 4.5.90 |
| GHSA-9gm9-c8mq-vq7m PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command() |
Critical EPSS 0.84% |
>= 4.5.15, < 4.5.69 | 4.5.69 |
| GHSA-9gm9-c8mq-vq7m PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command() |
Critical EPSS 0.84% |
>= 4.5.15, < 4.5.69 | 4.5.69 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor