NPM: npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

NPM: npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients vulnerability discovered by ? in WordPress Npm praisonai versions = 1.2.3, = 1.7.1...

GHSA-GQMF-56H7-RRPF npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

Summary The published npm package praisonai exports a TypeScript SandboxExecutor with a network-isolated mode. The CLI lists that mode as: text network-isolated No network access proxy blocked The implementation does not create a network namespace, firewall rule, socket filter, or proxy-enforced...