Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/11 3:30 p.m.•12 views

Duplicate Advisory: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fj8f-m44g-c479. This link is maintained to preserve external references. Original Description PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaul...

8.7CVSS5.5AI score0.00432EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2026/07/11 3:30 p.m.•9 views

GHSA-5R2Q-3WG3-57M2 Duplicate Advisory: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fj8f-m44g-c479. This link is maintained to preserve external references. Original Description PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaul...

8.7CVSS5.6AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/11 12:00 a.m.•8 views

CVE-2026-61439: Initialization of a Resource with an Insecure Default

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Attackers can submit single-vector prompt injection attacks such as instruction overrides or financi...

8.7CVSS5.6AI score0.00432EPSS
SaveExploits0References2
Rows per page
Query Builder