Veille CVE

Samedi 18 juillet 2026

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « MervinPraison PraisonAI » ✕
  1. CVE-2026-61440 6.5 Moyenne

    MervinPraison PraisonAI

    PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.