Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/41787?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/41787?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.2", "type": "pypi", "namespace": "", "name": "praisonai-platform", "version": "0.1.2", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "0.1.4", "latest_non_vulnerable_version": "0.1.4", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213137?format=api", "vulnerability_id": "VCID-1pct-6x3m-zfgd", "summary": "PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-6h6v-6m7w-7vxx", "reference_id": "GHSA-6h6v-6m7w-7vxx", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6h6v-6m7w-7vxx" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h6v-6m7w-7vxx", "reference_id": "GHSA-6h6v-6m7w-7vxx", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h6v-6m7w-7vxx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47399", "GHSA-6h6v-6m7w-7vxx" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1pct-6x3m-zfgd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213139?format=api", "vulnerability_id": "VCID-39gq-4ec9-jqbe", "summary": "praisonai-platform: JWT signing key defaults to hardcoded \"dev-secret-change-me\", allowing token forgery for any user when PLATFORM_ENV is unset", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-3qg8-5g3r-79v5", "reference_id": "GHSA-3qg8-5g3r-79v5", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3qg8-5g3r-79v5" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3qg8-5g3r-79v5", "reference_id": "GHSA-3qg8-5g3r-79v5", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3qg8-5g3r-79v5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47410", "GHSA-3qg8-5g3r-79v5" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-39gq-4ec9-jqbe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213134?format=api", "vulnerability_id": "VCID-3ja6-ayr8-4ydm", "summary": "PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-gv23-xrm3-8c62", "reference_id": "GHSA-gv23-xrm3-8c62", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gv23-xrm3-8c62" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gv23-xrm3-8c62", "reference_id": "GHSA-gv23-xrm3-8c62", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gv23-xrm3-8c62" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-48169", "GHSA-gv23-xrm3-8c62" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ja6-ayr8-4ydm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213140?format=api", "vulnerability_id": "VCID-dkdh-ab7z-qyhz", "summary": "praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-4x6r-9v57-3gqw", "reference_id": "GHSA-4x6r-9v57-3gqw", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4x6r-9v57-3gqw" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4x6r-9v57-3gqw", "reference_id": "GHSA-4x6r-9v57-3gqw", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4x6r-9v57-3gqw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47406", "GHSA-4x6r-9v57-3gqw" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dkdh-ab7z-qyhz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213142?format=api", "vulnerability_id": "VCID-nwqa-s9s1-87gh", "summary": "praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-w388-2392-px73", "reference_id": "GHSA-w388-2392-px73", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w388-2392-px73" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w388-2392-px73", "reference_id": "GHSA-w388-2392-px73", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w388-2392-px73" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47409", "GHSA-w388-2392-px73" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nwqa-s9s1-87gh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213136?format=api", "vulnerability_id": "VCID-p7ft-a6qt-vuhk", "summary": "PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-h8q5-cp56-rr65", "reference_id": "GHSA-h8q5-cp56-rr65", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h8q5-cp56-rr65" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h8q5-cp56-rr65", "reference_id": "GHSA-h8q5-cp56-rr65", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h8q5-cp56-rr65" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47407", "GHSA-h8q5-cp56-rr65" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p7ft-a6qt-vuhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213138?format=api", "vulnerability_id": "VCID-qd5b-kf7j-kka8", "summary": "PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-h37g-4h4p-9x97", "reference_id": "GHSA-h37g-4h4p-9x97", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h37g-4h4p-9x97" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h37g-4h4p-9x97", "reference_id": "GHSA-h37g-4h4p-9x97", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h37g-4h4p-9x97" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47405", "GHSA-h37g-4h4p-9x97" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qd5b-kf7j-kka8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213141?format=api", "vulnerability_id": "VCID-qnm6-2vvd-37d5", "summary": "praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-5jx9-w35f-vp65", "reference_id": "GHSA-5jx9-w35f-vp65", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5jx9-w35f-vp65" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5jx9-w35f-vp65", "reference_id": "GHSA-5jx9-w35f-vp65", "reference_type": "", "scores": [ { "value": "7.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5jx9-w35f-vp65" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47414", "GHSA-5jx9-w35f-vp65" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qnm6-2vvd-37d5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213143?format=api", "vulnerability_id": "VCID-rggk-way1-4qa1", "summary": "praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-c2m8-4gcg-v22g", "reference_id": "GHSA-c2m8-4gcg-v22g", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c2m8-4gcg-v22g" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c2m8-4gcg-v22g", "reference_id": "GHSA-c2m8-4gcg-v22g", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c2m8-4gcg-v22g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47416", "GHSA-c2m8-4gcg-v22g" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rggk-way1-4qa1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/213135?format=api", "vulnerability_id": "VCID-wdx7-nsfj-q3bh", "summary": "praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership", "references": [ { "reference_url": "https://github.com/MervinPraison/PraisonAI", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI" }, { "reference_url": "https://github.com/advisories/GHSA-27p4-pjqv-whgj", "reference_id": "GHSA-27p4-pjqv-whgj", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-27p4-pjqv-whgj" }, { "reference_url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-27p4-pjqv-whgj", "reference_id": "GHSA-27p4-pjqv-whgj", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-27p4-pjqv-whgj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api", "purl": "pkg:pypi/praisonai-platform@0.1.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.4" } ], "aliases": [ "CVE-2026-47408", "GHSA-27p4-pjqv-whgj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wdx7-nsfj-q3bh" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/praisonai-platform@0.1.2" }