2 matches found
PT-2026-107539
Name of the Vulnerable Software and Affected Versions praisonai-platform versions prior to 0.1.9 Description Issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member can delete a dependency from an owner-created issue by accessing it through a...
6.5CVSS5.7AI score0.00175EPSS
SaveExploits0References4
CVE-2026-61440
CVE-2026-61440 affects the PraisonAI Platform prior to 0.1.9. The issue is an authorization flaw in label and issue-label mutations that lets workspace members with basic privileges rename and recolor shared labels and add/remove labels on owner-created issues. The root cause is improper authoriz...
7.1CVSS5.8AI score0.00376EPSS
SaveExploits0References3
20