A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in pr…

▾ SunlitEPSS 0.16%via NVD

CVE-2026-61439High· 7.5

3mo ago

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Attackers can submit single-vector promp…

▾ TwilightPraisonAI · PraisonAIEPSS 0.34%via NVD

GHSA-5c3v-h6hw-4gx7Medium· 5.3

3mo ago

Duplicate Advisory: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

▾ Sunlitpraisonai · praisonaivia GHSA

GHSA-c6pq-cprj-62fwHigh· 7.8

3mo ago

Duplicate Advisory: PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

▾ Twilightpraisonaiagents · praisonaiagentsvia GHSA

GHSA-xrmc-c5cg-rv7xHigh· 8.8

CWE-693

Windows BitLocker Security Feature Bypass Vulnerability

Visual Studio Remote Code Execution Vulnerability

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.

A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked

Duplicate Advisory: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

Duplicate Advisory: PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

SafeInstall agent guard shell parsing can miss raw package execution

SiYuan is an open-source personal knowledge management system

Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.

netfoil has a domain name filter bypass via multiple questions

uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)

rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)

rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless of whether the import is flagged as un…

A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2

picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page

Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce methods, allowing attackers to execute arbitrary code

Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl

7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a R…

nono-py has proxy-only network fallback bypass on older Linux kernels