Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/07 4:49 p.m.6 views

CVE-2026-39307 PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction

PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall...

8.1CVSS5.9AI score0.00314EPSS
SaveExploits1References3
Rows per page
Query Builder