Security advisories

critical2026-05-29

CVE-2026-47391-PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

mervinpraison/praisonai · GHSA-vg22-4gmj-prxw

high2026-05-29

CVE-2026-47394-PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

mervinpraison/praisonai · GHSA-9cr9-25q5-8prj

critical2026-05-29

CVE-2026-47392-PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

mervinpraison/praisonai · GHSA-4mr5-g6f9-cfrh

medium2026-05-29

CVE-2026-47395-PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

mervinpraison/praisonai · GHSA-5cxw-77wg-jrf3

critical2026-05-29

CVE-2026-47393-PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

mervinpraison/praisonai · GHSA-8444-4fhq-fxpq

critical2026-05-29

CVE-2026-47396-PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

mervinpraison/praisonai · GHSA-86qc-r5v2-v6x6

medium2026-05-29

CVE-2026-47390-PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

mervinpraison/praisonai · GHSA-5c6w-wwfq-7qqm

high2026-05-29

CVE-2026-47398-PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

mervinpraison/praisonai · GHSA-78r8-wwqv-r299

high2026-05-29

CVE-2026-47266-formie's unauthenticated front-end submission editing can overwrite existing submissions

verbb/formie · GHSA-pgxq-p76c-x9cg

critical2026-05-29

stigmem-node's federation peer registration lacked explicit out-of-band approval

eidetic-labs/stigmem · GHSA-9vp8-3hmv-8fgh

high2026-05-29

stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment

eidetic-labs/stigmem · GHSA-w7pm-9g55-mxfm

critical2026-05-29

stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation

eidetic-labs/stigmem · GHSA-jmfc-hfjq-pxcp

high2026-05-29

stigmem-node's Postgres schema identifier handling required defensive quoting

eidetic-labs/stigmem · GHSA-9pc9-4crj-mhpj

high2026-05-29

stigmem-node's federation peer token timestamp validation may reject valid peer tokens

eidetic-labs/stigmem · GHSA-xh5j-xjfq-qvvx

critical2026-05-29

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

eidetic-labs/stigmem · GHSA-fp6w-8wpg-74g5

medium2026-05-29

CVE-2026-47268-Nezha's authenticated DDNS webhook configuration allows blind SSRF from the dashboard host

nezhahq/nezha · GHSA-6x26-5727-rrm9

medium2026-05-29

CVE-2026-47233-Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024

admidio/admidio · GHSA-xw54-c3mx-9pm3

medium2026-05-29

CVE-2026-47234-Admidio writes session IDs and auto-login cookie values to application logs

admidio/admidio · GHSA-mch8-wf3h-6x88

medium2026-05-29

CVE-2026-47232-Admidio PKCS#12 private key export action lacks CSRF protection

admidio/admidio · GHSA-4rgq-38mh-9xqg

high2026-05-29

CVE-2026-47231-Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

admidio/admidio · GHSA-x628-457g-2pw9