Vulnerabilities
Last updated 3 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
praisonaiagents
|
PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass | High Risk 8.5 | 7 days ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments | Medium Risk 6.1 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow | High Risk 7.8 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass | High Risk 8.5 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation | High Risk 8.1 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets | Critical 10.0 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace | Medium Risk 5.7 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification | High Risk 8.4 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure | High Risk 8.5 | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: Project config can auto-save agent output outside the project root | Unknown | 7 hours ago | 3 hours ago |
|
praisonaiagents
|
PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands | Medium Risk 5.5 | 3 months ago | 2 days ago |
|
praisonaiagents
|
PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments | Medium Risk 6.1 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets | Critical 10.0 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace | Medium Risk 5.7 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow | High Risk 7.8 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation | High Risk 8.1 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification | High Risk 8.4 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure | High Risk 8.5 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI: Project config can auto-save agent output outside the project root | Medium Risk 6.0 | 7 days ago | 7 days ago |
|
praisonaiagents
|
PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code | High Risk 7.8 | 1 month ago | 1 month ago |
|
praisonaiagents
|
PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code | High Risk 7.8 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap) | High Risk 7.5 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`) | High Risk 8.5 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool | Medium Risk 6.1 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents web_crawl vulnerable to SSRF via redirect-following | High Risk 7.5 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents: AgentServer declares auth_token but never enforces it on any route | High Risk 8.2 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location | High Risk 7.1 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets | High Risk 8.0 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`) | High Risk 8.5 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap) | High Risk 7.5 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents: AgentServer declares auth_token but never enforces it on any route | High Risk 8.2 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool | Medium Risk 6.1 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents web_crawl vulnerable to SSRF via redirect-following | High Risk 7.5 | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets | Unknown | 1 month ago | 1 month ago |
|
praisonaiagents
|
praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location | High Risk 7.1 | 1 month ago | 1 month ago |
|
praisonaiagents
|
PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint | High Risk 8.1 | 6 months ago | 1 month ago |
|
praisonaiagents
|
PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands | Medium Risk 5.5 | 6 months ago | 1 month ago |
|
praisonaiagents
|
PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass | Critical 9.8 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass | Critical 9.8 | 2 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints | Critical 9.8 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter | High Risk 8.8 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal | High Risk 7.5 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint | Medium Risk 4.3 | 3 months ago | 2 months ago |
|
praisonaiagents
|
praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS | High Risk 8.5 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in | Critical 9.8 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters | High Risk 8.1 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools | High Risk 8.3 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools | High Risk 8.3 | 2 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder | Medium Risk 6.5 | 3 months ago | 2 months ago |
|
praisonaiagents
|
PraisonAI: SpiderTools redirect-target SSRF protection bypass | Medium Risk 6.5 | 3 months ago | 2 months ago |
Page 1