CVE mentions, exploit signals, and PoC evidence in one fast public view.
CWE archive
2 CVEs tagged with CWE-396 — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when…
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthen…