Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-47414 Vulnerability in praisonai-platform (CVE-2026-47414)
vulnerability in praisonai-platform (CVE-2026-47414). Data can be tampered with by attackers. Exploitable via `PATCH /workspaces/{workspace_id}/labels/{label_id}`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47406 Vulnerability in praisonai-platform (CVE-2026-47406)
vulnerability in praisonai-platform (CVE-2026-47406). Confidential information can be exposed externally. Exploitable via `GET /workspaces/{workspace_id}/issues/{issue_id}/dependencies`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47410 Vulnerability in praisonai-platform (CVE-2026-47410)
vulnerability in praisonai-platform (CVE-2026-47410). Successful exploitation can lead to full system takeover. Exploitable via `POST /auth/register`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47405 Vulnerability in praisonai-platform (CVE-2026-47405)
vulnerability in praisonai-platform (CVE-2026-47405). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /workspaces/{workspace_id}`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47399 Vulnerability in praisonai-platform (CVE-2026-47399)
vulnerability in praisonai-platform (CVE-2026-47399). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/workspaces/{workspace_attacker}/agents/{victim_agent_id}`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47407 Privilege Escalation in praisonai-platform (CVE-2026-47407)
vulnerability in praisonai-platform (CVE-2026-47407). Risk of unauthorized operations or information disclosure. Exploitable via `GET /agents/{agent_id}`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47408 Vulnerability in praisonai-platform (CVE-2026-47408)
vulnerability in praisonai-platform (CVE-2026-47408). Confidential information can be exposed externally. Exploitable via `GET /workspaces/{workspace_id}/issues/{issue_id}/activity`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-48169 Vulnerability in praisonai-platform (CVE-2026-48169)
vulnerability in praisonai-platform (CVE-2026-48169). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/workspaces/{workspace_id}/issues/{issue_id}`. Mitigation: upgrade to `0.1.4` or later.
CVE-2026-47397 Path Traversal in PraisonAI (CVE-2026-47397)
path traversal in PraisonAI (CVE-2026-47397). Risk of unauthorized operations or information disclosure. Exploitable via ``write_file``. Mitigation: upgrade to `4.6.40` or later.
CVE-2026-47391 Vulnerability in PraisonAI (CVE-2026-47391)
vulnerability in PraisonAI (CVE-2026-47391). Successful exploitation can lead to full system takeover. Exploitable via `POST /a2a`. Mitigation: upgrade to `4.6.40` or later.
CVE-2026-47394 Information Disclosure in PraisonAI (CVE-2026-47394)
vulnerability in PraisonAI (CVE-2026-47394). Risk of unauthorized operations or information disclosure. Exploitable via ``praisonai.rules.create``. Mitigation: upgrade to `4.6.40` or later.
CVE-2026-47392 Vulnerability in praisonaiagents (CVE-2026-47392)
vulnerability in praisonaiagents (CVE-2026-47392). Successful exploitation can lead to full system takeover. Exploitable via ``print.__self__``. Mitigation: upgrade to `1.6.40` or later.
CVE-2026-47395 Information Disclosure in praisonaiagents (CVE-2026-47395)
vulnerability in praisonaiagents (CVE-2026-47395). Confidential information can be exposed externally. Exploitable via ``MentionsParser``. Mitigation: upgrade to `1.6.40` or later.
CVE-2026-47393 Vulnerability in PraisonAI (CVE-2026-47393)
vulnerability in PraisonAI (CVE-2026-47393). Successful exploitation can lead to full system takeover. Exploitable via ``auth_enabled``. Mitigation: upgrade to `4.6.40` or later.
CVE-2026-47396 Vulnerability in PraisonAI (CVE-2026-47396)
vulnerability in PraisonAI (CVE-2026-47396). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/agents`. Mitigation: upgrade to `4.6.40` or later.
CVE-2026-47390 SSRF (Server-Side Request Forgery) in praisonaiagents (CVE-2026-47390)
SSRF in praisonaiagents (CVE-2026-47390). Confidential information can be exposed externally. Exploitable via ``spider_tools``. Mitigation: upgrade to `1.6.40` or later.
CVE-2026-47398 Code Injection in PraisonAI (CVE-2026-47398)
code injection in PraisonAI (CVE-2026-47398). Successful exploitation can lead to full system takeover. Exploitable via `POST /v1/recipes/run`. Mitigation: upgrade to `4.6.40` or later.
GHSA-9vp8-3hmv-8fgh Vulnerability in stigmem-node (GHSA-9vp8-3hmv-8fgh)
vulnerability in stigmem-node (GHSA-9vp8-3hmv-8fgh). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0a2` or later.
GHSA-w7pm-9g55-mxfm Vulnerability in stigmem-node (GHSA-w7pm-9g55-mxfm)
vulnerability in stigmem-node (GHSA-w7pm-9g55-mxfm). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0a2` or later.
GHSA-jmfc-hfjq-pxcp Vulnerability in stigmem-node (GHSA-jmfc-hfjq-pxcp)
vulnerability in stigmem-node (GHSA-jmfc-hfjq-pxcp). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0a2` or later.
CVE-2026-9831 Vulnerability in CVE-2026-9831 (CVE-2026-9831)
vulnerability in CVE-2026-9831 (CVE-2026-9831). Confidential information can be exposed externally.
GHSA-9pc9-4crj-mhpj SQL Injection in stigmem-node (GHSA-9pc9-4crj-mhpj)
SQL injection in stigmem-node (GHSA-9pc9-4crj-mhpj). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0a2` or later.
GHSA-xh5j-xjfq-qvvx Vulnerability in stigmem-node (GHSA-xh5j-xjfq-qvvx)
vulnerability in stigmem-node (GHSA-xh5j-xjfq-qvvx). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0a2` or later.
GHSA-fp6w-8wpg-74g5 Vulnerability in stigmem-node (GHSA-fp6w-8wpg-74g5)
vulnerability in stigmem-node (GHSA-fp6w-8wpg-74g5). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0a2` or later.
CVE-2026-47268 SSRF (Server-Side Request Forgery) in github.com/nezhahq/nezha (CVE-2026-47268)
SSRF in github.com/nezhahq/nezha (CVE-2026-47268). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/ddns`. Mitigation: upgrade to `2.0.10` or later.
GHSA-8r2f-2qg4-cv9v Vulnerability in puppeteer (GHSA-8r2f-2qg4-cv9v)
vulnerability in puppeteer (GHSA-8r2f-2qg4-cv9v). Risk of unauthorized operations or information disclosure.
GHSA-6mj4-8j98-6c94 Vulnerability in midoss (GHSA-6mj4-8j98-6c94)
vulnerability in midoss (GHSA-6mj4-8j98-6c94). Risk of unauthorized operations or information disclosure.
CVE-2026-47233 Vulnerability in admidio/admidio (CVE-2026-47233)
vulnerability in admidio/admidio (CVE-2026-47233). Data can be tampered with by attackers. Exploitable via ``d37ca6b27b9674238e58491cf7ba292e66898f15``. Mitigation: upgrade to `5.0.10` or later.
GHSA-9vx3-fc8v-7w96 Vulnerability in customerdigital-service-lib (GHSA-9vx3-fc8v-7w96)
vulnerability in customerdigital-service-lib (GHSA-9vx3-fc8v-7w96). Risk of unauthorized operations or information disclosure.
GHSA-f4xf-cwx5-r3jm Vulnerability in hardhat-evmchain (GHSA-f4xf-cwx5-r3jm)
vulnerability in hardhat-evmchain (GHSA-f4xf-cwx5-r3jm). Risk of unauthorized operations or information disclosure.
GHSA-q36r-56hw-2r46 Vulnerability in chai-bundle (GHSA-q36r-56hw-2r46)
vulnerability in chai-bundle (GHSA-q36r-56hw-2r46). Risk of unauthorized operations or information disclosure.
GHSA-fv6c-xqrw-prcr Vulnerability in appkit-react-utils (GHSA-fv6c-xqrw-prcr)
vulnerability in appkit-react-utils (GHSA-fv6c-xqrw-prcr). Risk of unauthorized operations or information disclosure.
CVE-2026-47234 Information Disclosure in admidio/admidio (CVE-2026-47234)
vulnerability in admidio/admidio (CVE-2026-47234). Confidential information can be exposed externally. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47232 Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47232)
vulnerability in admidio/admidio (CVE-2026-47232). Risk of unauthorized operations or information disclosure. Exploitable via ``adm_csrf_token``. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47231 Vulnerability in admidio/admidio (CVE-2026-47231)
vulnerability in admidio/admidio (CVE-2026-47231). Confidential information can be exposed externally. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47230 Vulnerability in admidio/admidio (CVE-2026-47230)
vulnerability in admidio/admidio (CVE-2026-47230). Data can be tampered with by attackers. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
GHSA-88qj-pvmg-2jvm Vulnerability in viem-multichain (GHSA-88qj-pvmg-2jvm)
vulnerability in viem-multichain (GHSA-88qj-pvmg-2jvm). Risk of unauthorized operations or information disclosure.
GHSA-gxfh-j6jv-hc58 Vulnerability in ethers-contract (GHSA-gxfh-j6jv-hc58)
vulnerability in ethers-contract (GHSA-gxfh-j6jv-hc58). Risk of unauthorized operations or information disclosure.
GHSA-f3p6-3xjv-cxwq Vulnerability in ethers-hdnode (GHSA-f3p6-3xjv-cxwq)
vulnerability in ethers-hdnode (GHSA-f3p6-3xjv-cxwq). Risk of unauthorized operations or information disclosure.
GHSA-qqwp-8jp6-678r Vulnerability in argpras (GHSA-qqwp-8jp6-678r)
vulnerability in argpras (GHSA-qqwp-8jp6-678r). Risk of unauthorized operations or information disclosure.
GHSA-qqc4-xcxr-cq7p Vulnerability in @timelycare/config-service (GHSA-qqc4-xcxr-cq7p)
vulnerability in @timelycare/config-service (GHSA-qqc4-xcxr-cq7p). Risk of unauthorized operations or information disclosure.
GHSA-4xc8-739q-c5wg Vulnerability in @cplace-paw-fe/cf-training-extended (GHSA-4xc8-739q-c5wg)
vulnerability in @cplace-paw-fe/cf-training-extended (GHSA-4xc8-739q-c5wg). Risk of unauthorized operations or information disclosure.
GHSA-83jm-r9rf-7gcf Vulnerability in @trp-individual-investor-adv-disc/adv-shared (GHSA-83jm-r9rf-7gcf)
vulnerability in @trp-individual-investor-adv-disc/adv-shared (GHSA-83jm-r9rf-7gcf). Risk of unauthorized operations or information disclosure.
GHSA-68h2-v9v8-3829 Vulnerability in tailwind-effect (GHSA-68h2-v9v8-3829)
vulnerability in tailwind-effect (GHSA-68h2-v9v8-3829). Risk of unauthorized operations or information disclosure.
GHSA-x5hf-3wp7-2rhq Vulnerability in one-view-chat-ui-module (GHSA-x5hf-3wp7-2rhq)
vulnerability in one-view-chat-ui-module (GHSA-x5hf-3wp7-2rhq). Risk of unauthorized operations or information disclosure.
GHSA-m273-jgjp-6f68 Vulnerability in web3-config-loader (GHSA-m273-jgjp-6f68)
vulnerability in web3-config-loader (GHSA-m273-jgjp-6f68). Risk of unauthorized operations or information disclosure.
GHSA-fwwj-pvrq-jp8p Vulnerability in tailwindcss-basic-animation (GHSA-fwwj-pvrq-jp8p)
vulnerability in tailwindcss-basic-animation (GHSA-fwwj-pvrq-jp8p). Risk of unauthorized operations or information disclosure.
GHSA-w48r-28x8-4v9p Vulnerability in tailwind-smooth-slider (GHSA-w48r-28x8-4v9p)
vulnerability in tailwind-smooth-slider (GHSA-w48r-28x8-4v9p). Risk of unauthorized operations or information disclosure.
GHSA-vhgj-33p4-7gr8 Vulnerability in ota_web_admin (GHSA-vhgj-33p4-7gr8)
vulnerability in ota_web_admin (GHSA-vhgj-33p4-7gr8). Risk of unauthorized operations or information disclosure.
GHSA-fqr3-46mm-cgvp Vulnerability in evmchain-config (GHSA-fqr3-46mm-cgvp)
vulnerability in evmchain-config (GHSA-fqr3-46mm-cgvp). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →