Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•53 views

PraisonAI Slack app_mention bypasses configured user/channel authorization

PraisonAI Slack appmention bypasses configured user/channel authorization SummaryPraisonAI's Slack bot applies its configured allowedusers,allowedchannels, and unknown-user pairing policy in the normal Slackmessage event handler, but not in the adjacent Slack appmention eventhandler.A Slack...

8.3CVSS6.5AI score
SaveExploits0References5Affected Software1
osv_pysec
osv_pysec
•added 2026/07/23 11:41 a.m.•27 views

PYSEC-2026-3518 PraisonAI Slack app_mention bypasses configured user/channel authorization

PraisonAI Slack appmention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowedusers, allowedchannels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack appmention event handler. A Slack...

8.3CVSS6.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•31 views

PT-2026-64121

PraisonAI Slack app mention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowed users, allowed channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app mention event handler. A...

8.3CVSS6.5AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•29 views

PT-2026-53146

PraisonAI Slack app mention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowed users, allowed channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app mention event handler. A...

8.3CVSS6.5AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•11 views

MAL-2025-33009 Malicious code in serverless-slack-app (npm)

The package serverless-slack-app was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•12 views

Malicious code in serverless-slack-app (npm)

The package serverless-slack-app was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder