Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.6 views

PYSEC-2026-2899 PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction

The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall without verifying if the files within the archive resolve...

8.1CVSS6.3AI score0.00314EPSS
SaveExploits1References6
OSV
OSV
added 2026/04/06 11:8 p.m.10 views

GHSA-4PH2-F6PF-79WV PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction

The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall without verifying if the files within the archive resolve...

8.1CVSS6.2AI score0.00314EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/04/06 11:8 p.m.7 views

PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction

The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall without verifying if the files within the archive resolve...

8.1CVSS6.2AI score0.00314EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.16 views

PT-2026-30766

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.113 Description PraisonAI is a multi-agent teams system. The templates installation feature is susceptible to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from...

8.1CVSS6.3AI score0.00314EPSS
SaveExploits1References11
OSV
OSV
added 2025/06/12 7:31 a.m.4 views

SUSE-SU-2025:20416-1 Security update for systemd

This update for systemd fixes the following issues: - coredump: use %d in kernel core pattern CVE-2025-4598 - Revert "macro: terminate the temporary VAARGSFOREACH array with a sentinel" SUSE specific - umount: do not move busy network mounts bsc1236177 - man/pstore.conf: pstore.conf template is n...

4.7CVSS6.6AI score0.00748EPSS
SaveExploits1References6
Rows per page
Query Builder