144174 matches found
tamilai (0.0.2) potentially affected by CVE-2026-57138 via praisonai (1.7.1)
praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-57138 Source advisory: SNYK:JS-PRAISONAI-17660575...
Incorrect Authorization
Overview praisonai is a PraisonAI TypeScript AI Agents Framework - Node.js, npm, and Javascript AI Agents Framework Affected versions of this package are vulnerable to Incorrect Authorization via the MCPSecurity process. An attacker can gain unauthorized access to protected resources and perform...
Missing Authorization
Overview praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents Affected versions of this package are vulnerable to Missing Authorization through the runsse process. An attacker can gain unauthorized access to registered tools and interact with them by...
GHSA-47QP-HQVX-6R3F
creationtimestamp| type| source ---|---|--- 2026-06-18 13:41:25+00:00| seen| https://gist.github.com/alon710/adfa7aacc3b80320d7d38d47591141d2 2026-06-18 14:01:20+00:00| seen| https://gist.github.com/alon710/1009ff77420ca2d3dfc49ca0eb601808...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the TelnetIO.handleNAWS method, which does not check for upper bounds on requested dimensions. An attacker can cause CPU exhaustion by large NAWS Negotiate About Window Size...
@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.24), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.1.5) +5 more potentially affected by CVE-2026-55661 via @tinacms/mdx (>=2.0.0, <=2.1.6)
@tinacms/mdx NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-00aadfd-20260223215804, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.4.1 Source cves: CVE-2026-55661 Source...
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection via the fixRequestBody function. An attacker can inject or override multipart form fields, potentially bypassing gateway-side validation or access controls, by supplying crafted input containing carriage return and line...
Partial String Comparison
Overview Affected versions of this package are vulnerable to Partial String Comparison via the router component. An attacker can route requests to unintended backend servers by sending crafted HTTP requests with manipulated Host headers. Remediation A fix was pushed into the master branch but not...
@5minds/processcube_engine (>=19.0.0-beta.11, <=20.0.0-renovate-fd1892-me5sbqz0), @angular-devkit/build-angular (>=20.0.0-rc.0, <=22.1.0-next.0) +57 more potentially affected by CVE-2026-55388 via piscina (>=5.0.0, <=5.1.4)
piscina NPM version =5.0.0, =19.0.0-beta.11, =20.0.0-rc.0, =20.0.0-rc.0, =1.0.0, =21.2.2-depup.0, =21.2.2-depup.0, =1.0.0, =5.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =0.1.0, =0.1.26, =4.0.0-beta.1, =4.2.1 and more Source cves:...
Authorization Bypass Through User-Controlled Key
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the policy resolution process. An attacker can gain unauthorized access to group policies by supplying unvalidated group IDs when...
@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +23 more potentially affected by CVE-2026-53863 via openclaw (>=2026.3.22, <=2026.4.24)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 and more Source cves: CVE-2026-53863 Source advisory: OSV:GHSA-985F-72MJ-8GF7...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the session management process. An attacker can regain previously revoked node token authority by maintaining a pairing-scoped device session after the token ha...
@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53843 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53843 Source advisory: OSV:GHSA-Q99W-VH6V-Q3V7...
RHSA-2026:26655 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
RHSA-2026:26606 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:26597 Red Hat Security Advisory: redhat-ds:11 security update
Bulletin has no description...
RHSA-2026:26590 Red Hat Security Advisory: xorg-x11-server-Xwayland security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:26570 Red Hat Security Advisory: kernel security update
Bulletin has no description...