Advisory Catalog

PraisonAI Has Missing Authentication in WebSocket Gateway

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback

PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode

Copier `_subdirectory` allows template root escape via parent-directory traversal

Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write

OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)

AIOHTTP accepts duplicate Host headers

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

AIOHTTP has HTTP response splitting via \r in reason phrase

AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

AIOHTTP has a Multipart Header Size Bypass

AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows

AIOHTTP has CRLF injection through multipart part content type header construction

AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

openssl-encrypt has CORS wildcard with allow_credentials=True in standalone servers

openssl-encrypt accepts refresh tokens as URL query parameters causing token leakage

openssl-encrypt's readiness endpoint leaks database error details to unauthenticated callers

openssl-encrypt has no owner verification on key revocation — any client can revoke any key

openssl-encrypt's unverified key bundle from_dict() + to_identity() path allows encryption to attacker keys

poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

c2cciutils affected by CVE-2022-40896

aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPath 3.0/3.1 functions such as json-doc() and similar file-access primitives. Attackers can exploit the

ONNX: External Data Symlink Traversal

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

Open WebUI has Broken Access Control in Tool Valves

Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client

openssl-encrypt silently skips schema validation when jsonschema library is not installed

openssl-encrypt has non-cryptographic PRNG used for steganography pixel selection

openssl-encrypt has visible password in process list via --password CLI argument

openssl-encrypt: TOTP rate limiter is in-memory only — not shared across workers, lost on restart

openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification

FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability