1. PraisonAI Codebase Exposes 3 Unpatched CORS Vulnerabilities (CWE-942) Post-Audit
A recent security audit of the PraisonAI codebase has left three critical CORS misconfiguration vulnerabilities unaddressed, flagged as a medium-high risk. These specific issues, categorized under CWE-942, involve the use of a wildcard origin (`allow_origins=["*"]`) in the CORS middleware setup. This configuration allo...