praisonai vulnerabilities (PyPI)
107 vulnerabilities.
praisonaiPyPIPraisonAI: Authentication Bypass in OAuthManager.validate_token()9.1 CriticalpraisonaiPyPIPraisonAI: Missing Authentication in WebSocket Gateway9.1 CriticalpraisonaiPyPIPraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox8.8 HighpraisonaiPyPIPraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback7.7 HighpraisonaiPyPIPraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()6.5 MediumpraisonaiPyPIPraisonAI: Second-Order SQL Injection in `get_all_user_threads`9.8 CriticalpraisonaiPyPIPraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()9.8 Critical