PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

Summary The published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without authentication when the operator starts the documented CLI entrypoint: text praisonai serve...

EUVD-2005-4754

Malware in sbrugna...

EUVD-2014-0120

Malware in sbrugna...

CLSA-2024-1716485568 php: Fix of 2 CVEs

CVE-2022-4900: sapi/cli/phpcliserver.c: Prevent potential buffer overflow for large value of phpcliserverworkersmax - CVE-2023-3247: ext/soap/phphttp.c: Fix missing randomness check and insufficient random bytes...

The vulnerability of the php_cli_server_startup_workers function (sapi/cli/php_cli_server.c) in the PHP programming language allows a attacker to trigger a service failure.

The vulnerability of the phpcliserverstartupworkers function sapi/cli/phpcliserver.c in the PHP interpreter is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...