PR
Product
Praisonai
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 21Medium 5Low 0
Watch
Add Praisonai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40148 | 6.5 | Apr 9 | PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits Affected: before 4.5.128 |
| CVE-2026-44337 | 6.3 | May 8 | PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries Affected: 2.4.1 before 4.6.34 |
| CVE-2026-40112 | 6.1 | Apr 9 | PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency) Affected: before 4.5.128 |
| CVE-2026-40159 | 5.5 | Apr 10 | PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution Affected: before 4.5.128 |
| CVE-2026-40151 | 5.3 | Apr 9 | PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS Affected: before 4.5.128 |
Showing 5