Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/08/25 2:59 p.m.•21 views

PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

Summary praisonai/jobs/models.py::JobSubmitRequest.validatewebhookurl validates webhook URLs by resolving the hostname and checking whether the IP is private. When DNS resolution fails socket.gaierror, the validator silently passes the URL via except socket.gaierror: pass. Additionally, even when...

10CVSS6.3AI score0.00265EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder