praisonai vulnerabilities
CVEs whose affected-version data names the praisonai package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
122 CVEsRSS
CVE-2026-34955High· 8.8PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox
PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox
▾ Twilightpraisonai · praisonaiEPSS 0.39%via OSV
CVE-2026-34939Medium· 6.5PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()
PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()
▾ Sunlitpraisonai · praisonaiEPSS 0.45%via OSV