Advisory Catalog

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure

PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Keras: tar extraction permits symlink-based path traversal

Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

crewai-tools SSRF redirect bypass exposes internal services

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists with

DIRAC: SQL injection and lack of access control in PilotManager service

DIRAC: Pilot code downloaded over unverified HTTPS connection

DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to ve

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue.

PyOD persistence.load deserializes untrusted artifacts before validation