GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
8 advisories
npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
High
CVE-2026-57134
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
High
CVE-2026-57135
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
High
CVE-2026-57136
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI AgentLoop onToolCall approval runs after tool execution
High
CVE-2026-57137
was published
for
praisonai
(npm)
Jun 18, 2026
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
High
CVE-2026-57133
was published
for
praisonai
(npm)
Jun 18, 2026
OpenClaw Feishu tools could ignore per-account disablement
High
GHSA-2q7j-2vhx-56g8
was published
for
@openclaw/feishu
(npm)
Sep 3, 2026
OpenClaw Feishu permission tools could ignore per-account disablement
High
GHSA-w8wf-3qvj-6xqf
was published
for
@openclaw/feishu
(npm)
Sep 3, 2026
vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes
High
CVE-2026-92958
was published
for
vm2
(npm)
Oct 1, 2026
ProTip!
Advisories are also available from the
GraphQL API