https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:48:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-332272 EUVD-2026-332272 https://cve.radiocsirt.org/vuln/euvd-2026-332272 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58653 <p>PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.</p> <p>PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58653 https://cve.radiocsirt.org/vuln/ghsa-gggm-v68x-qqwv <p>PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.</p> <p>PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.</p> https://cve.radiocsirt.org/vuln/ghsa-gggm-v68x-qqwv