Login Request a demo
PR
Product
praisonai-platform
by MervinPraison · last CVE Oct 7, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 6High 11Medium 3Low 0
Severity
All severities20Critical6High11Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add praisonai-platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57147
9.8
1%
Sep 15
praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
Affected: < 0.1.6
CVE-2026-57148
9.8
1%
Sep 15
praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
Affected: < 0.1.6
CVE-2026-47410
9.8
0%
Jul 21
praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
Affected: < 0.1.4
CVE-2026-47416
9.6
0%
Jul 21
praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}
Affected: < 0.1.4
CVE-2026-47413
9.6
0%
Jul 21
praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members
Affected: < 0.1.4
CVE-2026-47407
9.4
0%
Jul 21
PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation
Affected: < 0.1.4
Showing 6