漏洞公告

BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags

Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr

praisonai-platform: Authorization Bypass Through User-Controlled Key

Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets

MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

pypdf: Missing stream length values ignore defined limits

Podman: WORKDIR symlink traversal vulnerability

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

undici vulnerable to cross-user information disclosure via shared cache whitespace bypass

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message

python-statemachine SCXML <data expr> Eval Injection

DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication

PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml