Advisory Catalog

PraisonAI has critical RCE via `type: job` workflow YAML

justhtml includes multiple security fixes

PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`

parisneo/lollms vulnerable to stored XSS in the social feature

PraisonAI Vulnerable Untrusted Remote Template Code Execution

PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

Apache Airflow: JWT token still valid after logout

PraisonAI Vulnerable to OS Command Injection

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

CI4MS Vulnerable to .env CRLF Injection via Unvalidated `host` Parameter in Install Controller

@delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections

Django vulnerable to privilege abuse in GenericInlineModelAdmin

LoLLMs is vulnerable to Improper Access Control through weak secret key

PraisonAI Has Path Traversal in FileTools

PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator

changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering

CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS

pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)

Directus: Missing Cross-Origin Opener Policy

Fortinet FortiClient EMS Improper Access Control Vulnerability

BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation

LiteLLM: Authentication bypass via OIDC userinfo cache key collision

SandboxJS: Sandbox integrity escape

mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step

Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist

pymetasploit3 vulnerable to command injection in console.run_module_with_output()

fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)

CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Kedro has Arbitrary Code Execution via Malicious Logging Configuration

Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache)

OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing

OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile

Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes

OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation

fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key

Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

Axios npm Supply Chain Incident Impacting @usebruno/cli

Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`

PraisonAI Has Authentication Bypass via OAuthManager.validate_token()

PraisonAI Has Missing Authentication in WebSocket Gateway

PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution