Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/08 10:00 p.m.•11 views

PraisonAI: Shell command allowlist bypass via find -exec built-in action

Summary The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj utility-tools shell chaining and GHSA-vjv9-7m7j-h833 SandboxExecutor chaining can be bypassed via find's built-in -exec action. The fix blocks shell metacharacters ;|& + The ...

8.8CVSS6.3AI score0.00877EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder