Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•29 views

PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

Summarydeploy.py constructs a single comma-delimited string for the gcloud rundeploy --set-env-vars argument by directly interpolating openaimodel,openaikey, and openaibase without validating that these values do notcontain commas. gcloud uses a comma as the key-value pair separator...

8.4CVSS6.1AI score0.0033EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder