PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a …

▾ TwilightPraisonAI · PraisonAIEPSS 0.18%via NVD

CVE-2026-56664Medium· 4.2

4mo ago

ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

▾ Sunlitzitadel · github.com/zitadel/zitadelEPSS 0.32%via OSV

CVE-2026-57573High· 8.6

4mo ago

Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

▾ Twilightcrawl4ai · crawl4aiEPSS 0.45%via OSV

CVE-2026-57572Critical· 10.0

4mo ago

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

▾ Midnightcrawl4ai · crawl4aiEPSS 0.94%via OSV

CVE-2026-56075High· 8.8PoC

4mo ago

PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable

PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticat…

▾ MidnightPraisonAI · PraisonAIEPSS 0.60%via NVD

CVE-2026-57204Medium

4mo ago

pypdf: Missing stream length values ignore defined limits

▾ Sunlitpypdf · pypdfEPSS 0.37%via OSV

CVE-2026-57571Critical· 9.6

4mo ago

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

▾ Midnightcrawl4ai · crawl4aiEPSS 0.81%via OSV

CVE-2026-58653Medium· 4.3

4mo ago

praisonai-platform: Authorization Bypass Through User-Controlled Key

▾ Sunlitpraisonai-platform · praisonai-platformEPSS 0.26%via OSV

CVE-2026-55686Medium· 5.3

4mo ago

Podman: WORKDIR symlink traversal vulnerability

▾ Sunlitcontainers · github.com/containers/podman/v5EPSS 0.40%via OSV

CVE-2026-44727Medium· 5.4

4mo ago

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

▾ Sunlitjupyter-server · jupyter-serverEPSS 0.44%via OSV

MAL-2026-6051None

4mo ago

Malicious code in telegram-lite-grabber (PyPI)

▾ Sunlittelegram-lite-grabber · telegram-lite-grabbervia OSV

MAL-2026-6080None

4mo ago

Malicious code in boardflow (PyPI)

▾ Sunlitboardflow · boardflowvia OSV

CVE-2025-71321Critical· 9.8

4mo ago

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers can construct malicious pickle objects to overwrite crit…

▾ Midnightpicklescan · picklescanEPSS 0.82%via NVD

CVE-2025-71322High· 8.8

4mo ago

PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks

PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks. Malicious actors can craft pickle payloads using pty.spawn to achieve arbitrary code execution whe…

▾ Twilightpicklescan · picklescanEPSS 0.38%via NVD

CVE-2025-71325Critical· 9.8

4mo ago

picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection

picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers …

▾ Midnightpicklescan · picklescanEPSS 0.60%via NVD

Tagged “osv”

Grafana Tempo vulnerable to an out-of-memory crash

ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys

ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer

Zeep: Server-Side Request Forgery (SSRF)

Hugo: security.http.urls deny rules bypassed by alternate IPv4 encodings (SSRF)

Hugo: XSS via unescaped code-fence language in default code block renderer

Hugo: Symlink confinement bypass in os.ReadFile

LangSmith SDK TracingMiddleware: Arbitrary server-side file read

Anki: User scripts in iframes have access to the internal Anki API

Anki's local HTTP server does not sufficiently validate requests

Python Liquid: Infinite loop when parsing malformed `{% case %}` tags

UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()

Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

Langflow: Logout button does not clear session

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts

ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable

pypdf: Missing stream length values ignore defined limits

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

praisonai-platform: Authorization Bypass Through User-Controlled Key

Podman: WORKDIR symlink traversal vulnerability

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

Malicious code in telegram-lite-grabber (PyPI)

Malicious code in boardflow (PyPI)

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file

PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks

picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection