Advisory Catalog

npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

PraisonAI Code agent tools fail open without a workspace boundary

PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)

PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API

PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS

PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API

PraisonAI: Compute-bridged file tools allow shell command injection

PraisonAI recipe.run_stream skips dangerous-tool policy enforcement

PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools

PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing

PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage

PraisonAI Slack app_mention bypasses configured user/channel authorization

PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal

PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals

http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

piscina: Prototype Pollution Gadget → RCE via inherited options.filename

Cotonti: Stored Cross-Site Scripting in the Personal File Storage (PFS) module

Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module

Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

Pimcore CMS Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed

Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation

Filament: Disabled RichEditor field state can be used for XSS

The Plotly.js Graphing module provides a fully customizable implementation of the open source Plotly.js graphing library. The module stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an object injection vulnerabilit

The Flag attendance field module gives you the ability to add attendance by depending on [Flag module](https://www.drupal.org/project/flag). `flag_attendance_field` stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects

Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

undici WebSocket client vulnerable to denial of service via fragment count bypass

pdfkit: Path traversal in from_string

Open WebUI: Stored XSS to Account Takeover via Model Profile Images

Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

Open WebUI: Stored XSS in Mermaid Markdown Preview

Open WebUI: Forged chat-file link allows cross-user file read and deletion

Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)

Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

Laravel Framework: CRLF injection in default email rule

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

n8n: Credential Exfiltration via Permission Bypass