EUVD-2026-21064

PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...

GHSA-R5FR-RJXR-66JC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, json-server, librechat, prism, langfuse, npm, foxx-cli, arangodb, semaphore, sqlpad, tensorflow-cpu-jupyter, ts-patch, redisinsight, drupal, langfuse-fips, kubeflow-pipelines, wazuh-dashboard, jitsucom-jitsu, kubeflow-centraldashboard,...

GHSA-9JGG-88MC-972H vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-4V9V-HFQ4-RM2V vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-9JGG-88MC-972H vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: pulumi, sqlpad, py3-jupyterlab, eslint, kubeflow-pipelines, langfuse, renovate, rancher-api-ui, tensorflow-cpu-jupyter, lerna, kubeflow-centraldashboard, node-gyp, tileserver-gl, npm, prism, opensearch-dashboards, argo-workflows, code-server, vitess...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, tileserver-gl-fips, node-gyp, prism, langfuse, npm, emsdk, foxx-cli, arangodb, sqlpad, tensorflow-cpu-jupyter, ts-patch, drupal, langfuse-fips, kubeflow-pipelines, kubeflow-centraldashboard, eslint, rancher-api-ui, pulumi, code-server,...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-CWPG-QGC6-JXVQ vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...

CVE-2024-29180 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, gitlab-rails-ce-fips, gitlab-rails-ce, vitess, vite...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: argo-workflows, vite, kubeflow-katib, vitess...

GHSA-CWPG-QGC6-JXVQ vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...

GHSA-H36C-M3RF-34H9 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows...