Lucene search
+L

7 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•24 views

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

SummaryCVE-2026-44338 GHSA-6rmh-7xcm-cpxj documents that PraisonAI ships a code-generator praisonai.deploy.api.generateapiservercode that emits a Flask API server with authentication disabled by default. Users who follow the documented quickstart praisonai deploy --type api get a server that:-...

9.8CVSS7.6AI score0.00823EPSS
SaveExploits3References6Affected Software1
attackerkb
attackerkb
•added 2026/02/12 3:31 p.m.•12 views

CVE-2026-26216

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

10CVSS6.6AI score0.06001EPSS
SaveExploits2References4
OSV
OSV
•added 2026/02/12 3:31 p.m.•20 views

CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

10CVSS6.8AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•2 views

CVE-2026-26216: Improper Control of Generation of Code

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

10CVSS6.6AI score0.06001EPSS
SaveExploits2References4
OSV
OSV
•added 2025/05/08 5:16 p.m.•11 views

DEBIAN-CVE-2025-44021

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious project assigned as a node owner can provide a path to any local file readable by ironic-conductor, which may then be written to the target...

2.8CVSS5.6AI score0.0019EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
•added 2024/10/01 1:00 p.m.•19 views

Introducing an Effortless Way to Deploy Akamai API Security

...

7.3AI score
SaveExploits0
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
•added 2021/10/28 8:41 a.m.•36 views

What Is API Management ❓ All That Novices To Experts Should Learn

The world of mobile and web app development revolves around API or Application Programming Interface. It’s a magic wand using which an application developer lets the applications correspond with each other. While you’re dealing with API, gaining acquaintances with API management operations, tools...

7.9AI score
SaveExploits0
Rows per page
Query Builder