Lucene search
+L

1432306 matches found

OSV
OSV
added 2026/09/10 9:44 a.m.3 views

PYSEC-2026-3891 PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Summary PraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset. This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS0.00152EPSS
SaveExploits0References7
PyPA
PyPA
added 2026/09/10 9:44 a.m.6 views

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

SummaryPraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset.This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS0.00152EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.3 views

PYSEC-2026-3822 django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

Summary The moveplugin admin endpoint does not prevent a plugin from being reparented under itself or one of its own descendants. Doing so creates a cycle in the plugin tree, after which the recursive descendant/ancestor SQL queries loop without terminating, stalling the request worker. Details...

7.1CVSS0.00345EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/10 9:44 a.m.3 views

PYSEC-2026-3903 PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Summary PraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset. This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS0.00152EPSS
SaveExploits0References7
PyPA
PyPA
added 2026/09/10 9:44 a.m.4 views

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

SummaryPraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset.This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS0.00152EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.5 views

PYSEC-2026-3900 praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

Summary praisonaiagents.tools.webcrawltools.webcrawl validates the initial URL and blocks direct loopback/private destinations by default, but the default httpx fallback still uses httpx.Clientfollowredirects=True and does not revalidate redirect targets. An attacker-controlled public URL can pas...

7.7CVSS0.00362EPSS
SaveExploits0References7
PyPA
PyPA
added 2026/09/10 9:44 a.m.4 views

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

ImpactThe only authorization gate on the duplicate flow is PageAdmin.hasaddpermission,which checks usercanaddpageuser, site / usercanaddsubpage... — i.e. “maythis user create a page at all”. Nothing checks the user’s relationship to the page beingcopied:- cms/admin/forms.py —...

6.5CVSS0.00239EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.5 views

PYSEC-2026-3820 django CMS: Clipboard copy IDOR discloses unauthorized plugin content

Summary The clipboard copy paths of the copyplugins admin endpoint validate only the target the user's own clipboard and skip source-side authorization. A staff user can copy plugins out of a placeholder they have no permission on into their clipboard, then read the secret content. Details In...

6.5CVSS0.00239EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/10 9:44 a.m.7 views

PYSEC-2026-3821 django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

Impact The only authorization gate on the duplicate flow is PageAdmin.hasaddpermission, which checks usercanaddpageuser, site / usercanaddsubpage... — i.e. “may this user create a page at all”. Nothing checks the user’s relationship to the page being copied: - cms/admin/forms.py —...

6.5CVSS0.00239EPSS
SaveExploits0References8
PyPA
PyPA
added 2026/09/10 9:44 a.m.7 views

LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive SummaryA NoSQL injection issue exists in the langgraph-checkpoint-mongodb andlanggraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methodsaccept a filter parameter that is incorporated into MongoDB queries without sufficient validation.Because MongoDB query operat...

7.7CVSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.5 views

PYSEC-2026-3859 LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...

7.7CVSS
SaveExploits0References7
PyPA
PyPA
added 2026/09/10 9:44 a.m.4 views

Wagtail: Improper restriction handling on Pages admin API

ImpactThe internal Pages admin API incorrectly returns page fields without access control when they are declared in apifields. A user with access to the Wagtail admin can use this API to fetch draft and live page fields’ contents that are part of apifields on the base page model title, slug,...

4.3CVSS0.002EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/09/10 9:44 a.m.6 views

LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive SummaryA NoSQL injection issue exists in the langgraph-checkpoint-mongodb andlanggraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methodsaccept a filter parameter that is incorporated into MongoDB queries without sufficient validation.Because MongoDB query operat...

7.7CVSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.2 views

PYSEC-2026-3860 LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...

7.7CVSS
SaveExploits0References7
PyPA
PyPA
added 2026/09/10 9:44 a.m.6 views

django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

SummaryThe django-cms frontend-editing structure endpointGET //admin/cms/placeholder/object//structure//did not perform an object-level authorization check for non-PageContent objects. Any authenticated, active staff user could request the structure endpoint for a frontend-editable object a model...

4.3CVSS0.00251EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.4 views

PYSEC-2026-3823 django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

Summary The django-cms frontend-editing structure endpoint GET //admin/cms/placeholder/object//structure// did not perform an object-level authorization check for non-PageContent objects. Any authenticated, active staff user could request the structure endpoint for a frontend-editable object a...

4.3CVSS0.00251EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/10 9:44 a.m.5 views

PYSEC-2026-3939 Wagtail: Improper restriction handling on Pages admin API

Impact The internal Pages admin API incorrectly returns page fields without access control when they are declared in apifields. A user with access to the Wagtail admin can use this API to fetch draft and live page fields’ contents that are part of apifields on the base page model title, slug,...

4.3CVSS0.002EPSS
SaveExploits0References5
PyPA
PyPA
added 2026/09/10 9:44 a.m.5 views

django CMS: Clipboard copy IDOR discloses unauthorized plugin content

Summary The clipboard copy paths of the copyplugins admin endpoint validate only the target the user's own clipboard and skip source-side authorization. A staff user can copy plugins out of a placeholder they have no permission on into their clipboard, then read the secret content. Details In...

6.5CVSS0.00239EPSS
SaveExploits0References8Affected Software1
Kitploit
Kitploit
added 2026/09/10 9:44 a.m.6 views

CVE-2025-23968

AI Bud – Generador de contenido AI, Chatbot AI, ChatGPT, Gemini, GPT-4o El plugin AI Bud expone un endpoint de API REST /wp-json/ai-buddy/v1/wp/attachments que permite subir archivos a la biblioteca de medios de WordPress. La lógica de archivos del endpoint contiene funcionalidad de renombrado qu...

9.1CVSS6AI score0.00425EPSS
SaveExploits5References1
PyPA
PyPA
added 2026/09/10 9:44 a.m.4 views

Cognee allows non-superusers to overwrite global LLM configuration

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all L...

9.3CVSS0.00511EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder