GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
8 advisories
npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
High
CVE-2026-57134
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
High
CVE-2026-57135
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
High
CVE-2026-57136
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI AgentLoop onToolCall approval runs after tool execution
High
CVE-2026-57137
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI codeMode sandbox escape via Function constructor
Critical
CVE-2026-57138
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation
Critical
CVE-2026-57140
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call
Critical
CVE-2026-57139
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
High
CVE-2026-57133
was published
for
praisonai
(npm)
Jun 18, 2026
ProTip!
Advisories are also available from the
GraphQL API