10:40
2026-09-02
dev.to
ai-safety
The TODO shipped to npm: an unauthenticated route that could stop any city's AI workflow (Your Priorities, @yrpri/api < 9.0.244)
A critical unauthenticated vulnerability was discovered in Your Priorities' @yrpri/api package, affecting versions prior to 9.0.244. The flaw allows any anonymous client to advance or stop AI agent wo…