Lucene search
+L

25 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•51 views

PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

SummaryPraisonAI's template loader accepts GitHub template URIs with refs, for examplegithub:owner/repo/[email protected]. The resolver stores the user-controlledtemplate path and ref verbatim, and the cache layer later joins those values into/.praison/cache/templates/github//// withoutnormalizing...

8.1CVSS5.9AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder