Lucene search
+L

8 matches found

PyPA
PyPA
•added 2026/10/15 10:22 a.m.•11 views

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

API deploy code generator embeds unescaped YAML fields into Python source SummaryPraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python...

8.5CVSS6.2AI score0.0021EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder