13354 matches found
CVE-2026-47395 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, PraisonAI's direct-prompt CLI automatically expands @url: mentions in raw prompt text before agent execution begins. If a prompt contains @url:, the CLI calls...
CVE-2026-47395
CVE-2026-47395 – PraisonAI CLI loopback/SSRF via @url: mentions Prior to PraisonAI v4.6.40 (and praisonaiagents v1.6.40), the direct-prompt CLI automatically expands @url:(http|https) prompts, performing an unrestricted urllib.request.urlopen() to the attacker-controlled URL. The fetched response...
MINI-47PV-PH27-XVXC
Bulletin has no description...
MINI-QWF3-528R-5RG3
Bulletin has no description...
CVE-2026-16407
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16399
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16382
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16388
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16378
Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16365
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16407
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16353
Invalid pointer in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
UBUNTU-CVE-2026-16372
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16383
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
UBUNTU-CVE-2026-16394
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16379
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
UBUNTU-CVE-2026-16400
Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16370
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...