Mervin Praison PraisonAI authorization issue vulnerability

A security vulnerability exists in Mervin Praison PraisonAI versions 4.6.56 through 4.6.59. This vulnerability arises because LinearBot’s public webhook listener treats LINEARWEBHOOKSECRET as optional; when the key is missing, Linear-Signature validation is skipped. As a result, unauthenticated...