CVE-2026-72899

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...

PT-2026-57433

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78 Description The PGVector and Cassandra knowledge-store create collection backends fail to validate the caller-controlled dimension argument. While schema, keyspace, and collection-name identifiers are...