GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls
Critical
CVE-2026-61445
was published
for
praisonai
(pip)
Oct 8, 2026
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation
High
CVE-2026-61443
was published
for
praisonaiagents
(pip)
Oct 8, 2026
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification
High
CVE-2026-61446
was published
for
praisonaiagents
(pip)
Oct 8, 2026
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
Critical
CVE-2026-61447
was published
for
praisonaiagents
(pip)
Oct 8, 2026
PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation
Critical
CVE-2026-62176
was published
for
PraisonAI
(pip)
Oct 7, 2026
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints
Moderate
CVE-2026-55591
was published
for
signalk-server
(npm)
Jun 18, 2026
ProTip!
Advisories are also available from the
GraphQL API