praisonai vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-39306HighPraisonAI: PraisonAI recipe registry pull path traversal writes files outside the chosen output directory CVE-2026-39305CriticalPraisonAI: PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator CVE-2026-39307HighPraisonAI: PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction CVE-2026-34953Criticalpraisonai: PraisonAI Has Authentication Bypass via OAuthManager.validate_token()CVE-2026-34952Criticalpraisonai: PraisonAI Has Missing Authentication in WebSocket Gateway CVE-2026-34955Highpraisonai: PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox CVE-2026-34936Highpraisonai: PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback CVE-2026-34939Mediumpraisonai: PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()CVE-2026-34934Criticalpraisonai: PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`CVE-2026-34935Criticalpraisonai: PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo