Security advisories

critical2026-04-10

CVE-2026-40288-PraisonAI has critical RCE via `type: job` workflow YAML

mervinpraison/praisonai · GHSA-vc46-vw85-3wvm

high2026-04-10

CVE-2026-40287-PraisonAI Vulnerable to RCE via Automatic tools.py Import

mervinpraison/praisonai · GHSA-g985-wjh9-qxxc

high2026-04-10

CVE-2026-40318-SiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`

siyuan-note/siyuan · GHSA-vw86-c94w-v3x4

high2026-04-10

CVE-2026-40259-SiYuan: Publish Reader Can Arbitrarily Delete Attribute View Files via `/api/av/removeUnusedAttributeView`

siyuan-note/siyuan · GHSA-7m5h-w69j-qggg

medium2026-04-10

CVE-2026-40315-PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

mervinpraison/praisonai · GHSA-x783-xp3g-mqhp

high2026-04-10

CVE-2026-40162-Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble

bugsink/bugsink · GHSA-8hw4-fhww-273g

low2026-04-10

@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler

saltcorn/saltcorn · GHSA-59xv-588h-2vmm

high2026-04-10

CVE-2026-40163-Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read

saltcorn/saltcorn · GHSA-32pv-mpqg-h292

high2026-04-10

CVE-2026-40114-PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

mervinpraison/praisonai · GHSA-8frj-8q3m-xhgm

medium2026-04-10

CVE-2026-56074-PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

mervinpraison/praisonai · GHSA-ffp3-3562-8cv3

high2026-04-10

CVE-2026-40160-PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

mervinpraison/praisonai · GHSA-qq9r-63f6-v542

high2026-04-10

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

mervinpraison/praisonai · GHSA-x462-jjpc-q4q4

medium2026-04-10

CVE-2026-40159-PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

mervinpraison/praisonai · GHSA-pj2r-f9mw-vrcq

critical2026-04-10

CVE-2026-40157-PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`

mervinpraison/praisonai · GHSA-99g3-w8gr-x37c

high2026-04-10

CVE-2026-40156-PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

mervinpraison/praisonai · GHSA-2g3w-cpc4-chr4

medium2026-04-10

CVE-2026-40148-PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits

mervinpraison/praisonai · GHSA-f2h6-7xfr-xm8w

critical2026-04-10

CVE-2026-40154-PraisonAI Vulnerable Untrusted Remote Template Code Execution

mervinpraison/praisonai · GHSA-pv9q-275h-rh7x

high2026-04-10

PraisonAI: Hardcoded `approval_mode="auto"` in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command Execution

mervinpraison/praisonai · GHSA-qwgj-rrpj-75xm

high2026-04-10

CVE-2026-40158-PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure

mervinpraison/praisonai · GHSA-3c4r-6p77-xwr7

medium2026-04-10

CVE-2026-40152-PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

mervinpraison/praisonai · GHSA-7j2f-xc8p-fjmq