3 matches found
EUVD-2026-42901
PraisonAI Platform praisonai-platform before 0.1.9 improperly authorizes deletion of issue dependencies. The DELETE dependency route accepts either endpoint of a dependency edge and checks delete permission only against the caller-selected URL issue. A workspace member who cannot delete a...
CVE-2026-61441 PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies
PraisonAI Platform praisonai-platform before 0.1.9 improperly authorizes deletion of issue dependencies. The DELETE dependency route accepts either endpoint of a dependency edge and checks delete permission only against the caller-selected URL issue. A workspace member who cannot delete a...
PT-2026-57195
Name of the Vulnerable Software and Affected Versions PraisonAI Platform versions prior to 0.1.9 Description Improper authorization occurs during the deletion of issue dependencies. The DELETE dependency route allows a user to specify either endpoint of a dependency edge, but the system only...