Lucene search
+L

16 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•21 views

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security ResearchTarget: https://github.com/MervinPraison/PraisonAI---Package: praisonaiagents on PyPIAffected version empirically tested: 1.6.48Component: praisonaiagents.server.AgentServer the bundled HTTP / SSE server---...

8.2CVSS6.2AI score0.00486EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder