Mervin Praison PraisonAI command injection vulnerability

Versions Mervin Praison PraisonAI from 4.5.87 through 4.6.61 contain a security vulnerability. This vulnerability arises because the recipe’s execution strategy for dangerous tools only checks the requires.tools field in TEMPLATE.yaml; it fails to validate the agent-level tools declarations and...