PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

SummaryThe fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py: "registers four file-handling tools by default, praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and...

IBM Security Identity Manager Adapters Information Disclosure Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States that automates the creation, modification, re-authentication, and termination of user privileges throughout the user lifecycle and supports policy-based password...