praisonai-platform vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-2FJJ-QQG8-FG7XMediumpraisonai-platform: praisonai-platform: Authorization Bypass Through User-Controlled KeyCVE-2026-57147Criticalpraisonai-platform: praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryCVE-2026-57148Criticalpraisonai-platform: praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)CVE-2026-57121Highpraisonai-platform: PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APICVE-2026-47419Highpraisonai-platform: praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDORCVE-2026-47412Highpraisonai-platform: praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}CVE-2026-47415Highpraisonai-platform: praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDORCVE-2026-47413Criticalpraisonai-platform: praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/membersCVE-2026-47411Mediumpraisonai-platform: praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}CVE-2026-47417Highpraisonai-platform: praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDORCVE-2026-47418Highpraisonai-platform: praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDORCVE-2026-47416Criticalpraisonai-platform: praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}CVE-2026-47409Highpraisonai-platform: praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of roleCVE-2026-47414Highpraisonai-platform: praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)CVE-2026-47406Highpraisonai-platform: praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checksCVE-2026-47410Criticalpraisonai-platform: praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is…CVE-2026-47405Highpraisonai-platform: PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membershipCVE-2026-47399Highpraisonai-platform: PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object IDCVE-2026-47407Criticalpraisonai-platform: PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalationCVE-2026-47408Mediumpraisonai-platform: praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownershipCVE-2026-48169Highpraisonai-platform: PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo