PraisonAI versions before 4.6.78 shipped with an insecure default in its InjectionDefense component, where the block threshold defaulted to CRITICAL and allowed single-vector prompt injections rated H…
Anthropic's September 30, 2026 deadline for its Phase 1 provable-inference moonshot R&D milestone passed without any public blog post, press release, or social media confirmation from the company. Ant…
A critical authentication bypass in the PraisonAI multi-agent orchestration framework, tracked as CVE-2026-44338 with a CVSS score of 7.3, was probed by an automated scanner 3 hours, 44 minutes, and 3…
The x-cmd team released `x ajv`, a Deno-based JSON/YAML/TOML validator that sandboxes AJV with read-only access to prevent malicious injections and privilege escalation, addressing CVE-2026-39890 in P…
RAXE Labs disclosed nine CVEs in PraisonAI's PyPI packages on July 11, including two CVSS 10.0 remote code execution flaws (CVE-2026-61447 and CVE-2026-34938) that require immediate patching. The vuln…