漏洞公告

PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Duplicate Advisory: Allowlisted pickle loaders still permit code execution in current source

Duplicate Advisory: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses (CWE-776)

Duplicate Advisory: [CWE-502] Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

Duplicate Advisory: pathsec SSRF protection can be bypassed when a proxy is configured

Duplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427)

vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths

Cloudreve's remote download file paths can escape the selected destination directory

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

netfoil vulnerable to improper handling of untrusted DoH response data

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service

postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service

postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service

Sakai Profile Image Deletion has an IDOR