virtualenv: Bash activator leaves the --prompt value unescaped in PS1

LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment

Text Prompter – Unlimited chatgpt text prompts for openai tasks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'text_prompter' shortcode in all versions

llama-cpp-python is the Python bindings for llama.cpp. `llama

9router has unauthenticated CRUD on /api/providers and Full API Key

Flowise: Parameter Override Bypass Remote Command Execution

files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a statement into a prompt to read the "etc/passwd" file

Open WebUI: Cross-user file disclosure via /api/chat/completions image_url

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

LiteLLM: Server-Side Template Injection in /prompts/test endpoint

PraisonAI CLI automatically resolves @url mentions in prompt text and

Coder's AI Bridge Proxy skips TLS certificate verification in

@rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw

mcp-shell has a Secure Mode Allowlist Bypass via Git

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval

nnU-Net is a semantic segmentation framework that automatically adapts

Open WebUI Affected by an External Model Server (Direct Connections

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass