Boletines de Vulnerabilidades

CVE-2026-57113

   
Software afectado GITHUB
 
PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/template@v1.0.0. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into ~/.praison/cache/templates/github/ / /

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-57113