PT-2026-29831

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.97 Description PraisonAI's SubprocessSandbox in all modes BASIC, STRICT, NETWORK ISOLATED utilizes subprocess.run with shell=True and relies on string-pattern matching for command blocking. The blocklist does no...

PbootCMS 安全漏洞

PbootCMS is an open-source enterprise website content management system developed using the PHP language. PbootCMS versions 3.2.12 and earlier have security vulnerabilities. These vulnerabilities stem from incorrect handling of the 'black' parameter in the File Upload component’s code, located in...

CVE-2026-32747

SiYuan CVE-2026-32747 affects versions 3.6.0 and below, where the globalCopyFiles API exposes files outside the workspace due to a flawed blocklist in filepath.Abs()-based path resolution. The util.IsSensitivePath() blocklist omits /proc/, /run/secrets/, and home directory dotfiles, enabling an a...