EUVD-2026-44644

PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization...

PT-2026-108716

Name of the Vulnerable Software and Affected Versions praisonai-platform versions 0.1.6 through 0.1.8 Description An authorization gap allows ordinary workspace members to modify shared labels and manage label assignments on issues created by owners or administrators. While direct label deletion ...

CVE-2026-61440

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to...

CVE-2026-61440 PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to...

PT-2026-60141

Name of the Vulnerable Software and Affected Versions PraisonAI Platform versions prior to 0.1.9 Description The platform fails to properly authorize mutations related to labels and issue-labels. This allows users with workspace member privileges to rename and recolor shared labels, as well as ad...

CVE-2022-0376

The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels before outputting them in the admin dashboard when editing a form, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfilteredhtml is...