Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•12 views

PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

Summarypraisonai/jobs/models.py::JobSubmitRequest.validatewebhookurl validates webhookURLs by resolving the hostname and checking whether the IP is private. When DNSresolution fails socket.gaierror, the validator silently passes the URL viaexcept socket.gaierror: pass. Additionally, even when DNS...

10CVSS6.2AI score0.00338EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder