Langchain SQL Injection vulnerability

Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family

From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template

AgenticMail gives AI agents real email addresses and phone numbers

CodeWhale: js_execution leaks parent environment to model context via

Open WebUI: Sharing models for others to use (read permission

@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not

PraisonAI: Webhook signature verification skipped (fail-open) when secret unset

@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create

CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain

MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution

TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery

mcp-memory-service: Missing Authentication on Document API Endpoints Allows

OpenClaw: Lower-trust background runtime output is injected into trusted

CodeWhale: exec_shell_interact sends LLM-controlled input to a

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in

Cursor is a code editor built for programming with AI