GHSA lookup
GHSA-9Q28-GHCR-C4X3
Pruva has a verified reproduction for GHSA-9Q28-GHCR-C4X3: PraisonAI: ZipSlip path traversal via unchecked tar symlink linkname in _safe_extractall. The canonical evidence record is REPRO-2026-00149.
REPRO
REPRO-2026-00149
Package
praisonai · pip
Severity
HIGH
Status
published