Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-57130 Vulnerability in praisonaiagents (CVE-2026-57130)
vulnerability in praisonaiagents (CVE-2026-57130). Risk of unauthorized operations or information disclosure. Exploitable via ``search_emails``. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-57113 Path Traversal in praisonai (CVE-2026-57113)
path traversal in praisonai (CVE-2026-57113). Risk of unauthorized operations or information disclosure. Exploitable via ``GITHUB_PATTERN``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57209 Vulnerability in github.com/dadrus/heimdall (CVE-2026-57209)
vulnerability in github.com/dadrus/heimdall (CVE-2026-57209). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `0.17.17` or later.
CVE-2026-57210 Vulnerability in https://github.com/dadrus/heimdall (CVE-2026-57210)
vulnerability in https://github.com/dadrus/heimdall (CVE-2026-57210). Risk of unauthorized operations or information disclosure. Exploitable via ``trusted_proxies``. Mitigation: upgrade to `0.17.17` or later.
MINI-jhm4-p4rg-w6fh MINI-jhm4-p4rg-w6fh
MINI-f82v-xg5f-j2r6 MINI-f82v-xg5f-j2r6
MINI-6mjx-5qff-5v2r MINI-6mjx-5qff-5v2r
MINI-54pj-wgjh-qmqf MINI-54pj-wgjh-qmqf
CVE-2026-50141 Vulnerability in go.woodpecker-ci.org/woodpecker/v3 (CVE-2026-50141)
vulnerability in go.woodpecker-ci.org/woodpecker/v3 (CVE-2026-50141). Risk of unauthorized operations or information disclosure. Exploitable via ``agent_id``. Mitigation: upgrade to `3.14.1` or later.
CVE-2026-11958 Vulnerability in c (CVE-2026-11958)
vulnerability in c (CVE-2026-11958). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-44942 Vulnerability in libzypp (UBUNTU-CVE-2026-44942)
vulnerability in libzypp (UBUNTU-CVE-2026-44942). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2455-1 Vulnerability in frr (SUSE-SU-2026:2455-1)
vulnerability in frr (SUSE-SU-2026:2455-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.5.7-8.16.1` or later.
SUSE-SU-2026:2454-1 Vulnerability in frr (SUSE-SU-2026:2454-1)
vulnerability in frr (SUSE-SU-2026:2454-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.5.7-150500.4.43.1` or later.
CVE-2026-56839 Path Traversal in praisonai (CVE-2026-56839)
path traversal in praisonai (CVE-2026-56839). Risk of unauthorized operations or information disclosure. Exploitable via ``CODE_TOOLS``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57124 OS Command Injection in praisonai (CVE-2026-57124)
OS command injection in praisonai (CVE-2026-57124). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/mcp/connect`. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57122 Vulnerability in praisonai (CVE-2026-57122)
vulnerability in praisonai (CVE-2026-57122). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57121 Vulnerability in praisonai-platform (CVE-2026-57121)
vulnerability in praisonai-platform (CVE-2026-57121). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /api/v1/workspaces/{workspace_id}/projects/{project_id}`. Mitigation: upgrade to `0.1.6` or later.
CVE-2026-57116 Information Disclosure in praisonai (CVE-2026-57116)
vulnerability in praisonai (CVE-2026-57116). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/agents`. Mitigation: upgrade to `4.6.59` or later.
MINI-7q3f-3w8j-8f23 MINI-7q3f-3w8j-8f23
CVE-2026-57118 Vulnerability in praisonaiagents (CVE-2026-57118)
vulnerability in praisonaiagents (CVE-2026-57118). Risk of unauthorized operations or information disclosure. Exploitable via `GET /{path}/list`. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-57114 Vulnerability in praisonai (CVE-2026-57114)
vulnerability in praisonai (CVE-2026-57114). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/runs`. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57131 Code Injection in praisonai (CVE-2026-57131)
code injection in praisonai (CVE-2026-57131). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/runs`. Mitigation: upgrade to `4.6.59` or later.
MINI-9vpr-fr5r-5m7x MINI-9vpr-fr5r-5m7x
CVE-2026-57129 Path Traversal in praisonaiagents (CVE-2026-57129)
path traversal in praisonaiagents (CVE-2026-57129). Risk of unauthorized operations or information disclosure. Exploitable via ``workspace_path``. Mitigation: upgrade to `1.6.59` or later.
ROOT-APP-GOBINARY-CVE-2026-1229 Vulnerability in rootio-github.com/cloudflare/circl (ROOT-APP-GOBINARY-CVE-2026-1229)
vulnerability in rootio-github.com/cloudflare/circl (ROOT-APP-GOBINARY-CVE-2026-1229). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `v1.6.1-root.io.1, v1.6.1-root.io.2` or later.
CVE-2026-57127 Vulnerability in praisonai (CVE-2026-57127)
vulnerability in praisonai (CVE-2026-57127). Risk of unauthorized operations or information disclosure. Exploitable via `X-API-Key header`. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57126 SSRF (Server-Side Request Forgery) in praisonaiagents (CVE-2026-57126)
SSRF in praisonaiagents (CVE-2026-57126). Risk of unauthorized operations or information disclosure. Exploitable via ``SpiderTools._validate_url``. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-57125 Vulnerability in praisonai (CVE-2026-57125)
vulnerability in praisonai (CVE-2026-57125). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/runs`. Mitigation: upgrade to `4.6.59` or later.
MINI-cqwh-4cvj-5585 MINI-cqwh-4cvj-5585
CVE-2026-57119 Path Traversal in praisonai (CVE-2026-57119)
path traversal in praisonai (CVE-2026-57119). Risk of unauthorized operations or information disclosure. Exploitable via ``agent_file``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57123 Vulnerability in praisonaiagents (CVE-2026-57123)
vulnerability in praisonaiagents (CVE-2026-57123). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-57120 Vulnerability in praisonaiagents (CVE-2026-57120)
vulnerability in praisonaiagents (CVE-2026-57120). Risk of unauthorized operations or information disclosure. Exploitable via ``execute_code``. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-57115 SSRF (Server-Side Request Forgery) in praisonaiagents (CVE-2026-57115)
SSRF in praisonaiagents (CVE-2026-57115). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-57117 OS Command Injection in praisonai (CVE-2026-57117)
OS command injection in praisonai (CVE-2026-57117). Risk of unauthorized operations or information disclosure. Exploitable via ``LocalManagedAgent``. Mitigation: upgrade to `4.6.59` or later.
ROOT-APP-GOBINARY-CVE-2026-32285 Vulnerability in rootio-github.com/buger/jsonparser (ROOT-APP-GOBINARY-CVE-2026-32285)
vulnerability in rootio-github.com/buger/jsonparser (ROOT-APP-GOBINARY-CVE-2026-32285). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.1.1-root.io.1, v1.1.1-root.io.3` or later.
CVE-2026-56838 OS Command Injection in praisonai (CVE-2026-56838)
OS command injection in praisonai (CVE-2026-56838). Risk of unauthorized operations or information disclosure. Exploitable via `POST /v1/recipes/stream`. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-56840 Cross-Site Scripting (XSS) in praisonai (CVE-2026-56840)
cross-site scripting in praisonai (CVE-2026-56840). Risk of unauthorized operations or information disclosure. Exploitable via ``praisonai.bots.HTTPApproval``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-56837 Authentication Bypass in praisonai (CVE-2026-56837)
authentication bypass in praisonai (CVE-2026-56837). Risk of unauthorized operations or information disclosure. Exploitable via ``LINEAR_WEBHOOK_SECRET``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-56834 Path Traversal in praisonai (CVE-2026-56834)
path traversal in praisonai (CVE-2026-56834). Risk of unauthorized operations or information disclosure. Exploitable via ``artifact_tail``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-56835 Vulnerability in praisonai (CVE-2026-56835)
vulnerability in praisonai (CVE-2026-56835). Risk of unauthorized operations or information disclosure. Exploitable via ``app_mention``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-56836 Authentication Bypass in praisonai (CVE-2026-56836)
authentication bypass in praisonai (CVE-2026-56836). Risk of unauthorized operations or information disclosure. Exploitable via `GET /v1/recipes`. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-57112 Vulnerability in praisonaiagents (CVE-2026-57112)
vulnerability in praisonaiagents (CVE-2026-57112). Risk of unauthorized operations or information disclosure. Exploitable via ``mcp.server.sse.SseServerTransport``. Mitigation: upgrade to `1.6.59` or later.
CVE-2026-56833 Path Traversal in praisonai (CVE-2026-56833)
path traversal in praisonai (CVE-2026-56833). Risk of unauthorized operations or information disclosure. Exploitable via ``history_search``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-56832 Vulnerability in praisonai (CVE-2026-56832)
vulnerability in praisonai (CVE-2026-56832). Risk of unauthorized operations or information disclosure. Exploitable via ``praisonai.bots.DiscordApproval``. Mitigation: upgrade to `4.6.59` or later.
CVE-2026-55669 Vulnerability in github.com/zitadel/zitadel (CVE-2026-55669)
vulnerability in github.com/zitadel/zitadel (CVE-2026-55669). Risk of unauthorized operations or information disclosure. Exploitable via ``iss``. Mitigation: upgrade to `1.80.0-v2.20.0.20260615132747-d184e976fc79` or later.
MINI-wwpr-rv7m-7738 MINI-wwpr-rv7m-7738
GHSA-wxg7-w2v3-w38g Vulnerability in github.com/zitadel/zitadel (GHSA-wxg7-w2v3-w38g)
vulnerability in github.com/zitadel/zitadel (GHSA-wxg7-w2v3-w38g). Risk of unauthorized operations or information disclosure. Exploitable via ``exp``. Mitigation: upgrade to `1.80.0-v2.20.0.20260615122908-fad02c6d9f45` or later.
CVE-2026-55672 Authentication Bypass in github.com/zitadel/zitadel (CVE-2026-55672)
authentication bypass in github.com/zitadel/zitadel (CVE-2026-55672). Confidential information can be exposed externally. Mitigation: upgrade to `1.80.0-v2.20.0.20260616131956-0973b074b488` or later.
CVE-2026-57128 Vulnerability in praisonaiagents (CVE-2026-57128)
vulnerability in praisonaiagents (CVE-2026-57128). Risk of unauthorized operations or information disclosure. Exploitable via ``ServerConfig``. Mitigation: upgrade to `1.6.59` or later.
SUSE-SU-2026:2453-1 Vulnerability in java-1_8_0-ibm (SUSE-SU-2026:2453-1)
vulnerability in java-1_8_0-ibm (SUSE-SU-2026:2453-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0_sr8.65-30.150.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →