CVE-2026-56840

The PraisonAI multi-agent system is vulnerable to Cross-site Scripting (XSS) in its HTTPApproval dashboard from versions 4.5.2 to before 4.6.59 . The root cause is the _build_html() function in src/praisonai/praisonai/bots/_http_approval.py, which uses raw f-string interpolation to render tool na...