Security advisories

high2026-04-10

CVE-2026-40153-PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

mervinpraison/praisonai · GHSA-v8g7-9q6v-p3x8

medium2026-04-10

CVE-2026-40151-PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

mervinpraison/praisonai · GHSA-pm96-6xpr-978x

high2026-04-10

CVE-2026-40149-PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

mervinpraison/praisonai · GHSA-4wr3-f4p3-5wjh

high2026-04-10

CVE-2026-40150-PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

mervinpraison/praisonai · GHSA-8f4v-xfm9-3244

medium2026-04-10

CVE-2026-40117-PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

mervinpraison/praisonai · GHSA-grrg-5cg9-58pf

medium2026-04-10

CVE-2026-40115-PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS

mervinpraison/praisonai · GHSA-2xgv-5cv2-47vv

high2026-04-10

CVE-2026-40116-PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

mervinpraison/praisonai · GHSA-q5r4-47m9-5mc7

high2026-04-10

CVE-2026-40113-PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

mervinpraison/praisonai · GHSA-fvxx-ggmx-3cjg

medium2026-04-10

CVE-2026-40112-PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)

mervinpraison/praisonai · GHSA-cfg2-mxfj-j6pw

critical2026-04-10

CVE-2026-40111-PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

mervinpraison/praisonai · GHSA-v7px-3835-7gjx

high2026-04-10

CVE-2026-40107-SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering

siyuan-note/siyuan · GHSA-w95v-4h65-j455

critical2026-04-10

CVE-2026-34177-LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

canonical/lxd · GHSA-fm2x-c5qw-4h6f

critical2026-04-10

CVE-2026-34178-LXD: Importing a crafted backup leads to project restriction bypass

canonical/lxd · GHSA-q96j-3fmm-7fv4

critical2026-04-10

CVE-2026-34179-LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

canonical/lxd · GHSA-c3h3-89qf-jqm5

medium2026-04-10

justhtml includes multiple security fixes

emilstenstrom/justhtml · GHSA-c9vm-hv86-f23r

medium2026-04-10

CVE-2026-34481-Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

apache/logging-log4j2 · GHSA-w35j-pv5h-q9q9

medium2026-04-10

CVE-2026-34479-Apache Log4j 1 to Log4j 2 bridge: silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters

apache/logging-log4j2 · GHSA-h383-gmxw-35v2

medium2026-04-10

CVE-2026-40021-Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

apache/logging-log4net · GHSA-4f7c-pmjv-c25w

medium2026-04-10

CVE-2026-34477-Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configuration

apache/logging-log4j2 · GHSA-6hg6-v5c8-fphq

medium2026-04-10

CVE-2026-34478-Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibility

apache/logging-log4j2 · GHSA-445c-vh5m-36rj