https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:13:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336480 EUVD-2026-336480 https://cve.radiocsirt.org/vuln/euvd-2026-336480 https://cve.radiocsirt.org/vuln/fkie_cve-2026-60090 <p>PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as &#39;3); DROP TABLE tenant_secrets; --&#39; to inject SQL/CQL tokens into the statement executed by the database driver.</p> <p>PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as &#39;3); DROP TABLE tenant_secrets; --&#39; to inject SQL/CQL tokens into the statement executed by the database driver.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-60090 https://cve.radiocsirt.org/vuln/ghsa-q65p-7p84-495c <p>PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as &#39;3); DROP TABLE tenant_secrets; --&#39; to inject SQL/CQL tokens into the statement executed by the database driver.</p> <p>PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as &#39;3); DROP TABLE tenant_secrets; --&#39; to inject SQL/CQL tokens into the statement executed by the database driver.</p> https://cve.radiocsirt.org/vuln/ghsa-q65p-7p84-495c