praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR
High severity
GitHub Reviewed
Published
May 19, 2026
in
MervinPraison/PraisonAI
•
Updated Jun 1, 2026
Give feedback on Dependabot alerts