ABAlon Baradincvereports.hashnode.dev·May 11 · 2 min readCVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLMCVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM Vulnerability ID: CVE-2026-40217 CVSS Score: 8.8 Published: 2026-05-11 LiteLLM, an open-source LLM proxy, contains a critical sandbox escape vulnerability in its guardrail testing ...00
ABAlon Baradincvereports.hashnode.dev·May 11 · 2 min readCVE-2026-44643: CVE-2026-44643: Sandbox Escape and Remote Code Execution in angular-expressionsCVE-2026-44643: Sandbox Escape and Remote Code Execution in angular-expressions Vulnerability ID: CVE-2026-44643 CVSS Score: 9.3 Published: 2026-05-11 CVE-2026-44643 is a critical sandbox escape vulnerability in the peerigon/angular-expressions lib...00
ABAlon Baradincvereports.hashnode.dev·May 11 · 2 min readCVE-2026-44340: CVE-2026-44340: Arbitrary File Write via Symlink Traversal in PraisonAI Tar ExtractionCVE-2026-44340: Arbitrary File Write via Symlink Traversal in PraisonAI Tar Extraction Vulnerability ID: CVE-2026-44340 CVSS Score: 8.7 Published: 2026-05-11 PraisonAI versions prior to 4.6.37 contain a path traversal vulnerability in the _safe_ext...00
ABAlon Baradincvereports.hashnode.dev·May 9 · 2 min readCVE-2023-49316: CVE-2023-49316: Denial of Service via Unbounded Degree in phpseclib Binary Finite FieldsCVE-2023-49316: Denial of Service via Unbounded Degree in phpseclib Binary Finite Fields Vulnerability ID: CVE-2023-49316 CVSS Score: 7.5 Published: 2026-05-08 The phpseclib cryptographic library version 3.x prior to 3.0.34 contains a Denial of Ser...00
ABAlon Baradincvereports.hashnode.dev·May 9 · 2 min readGHSA-MV93-W799-CJ2W: GHSA-MV93-W799-CJ2W: Remote Code Execution via Config Section Injection in GitPythonGHSA-MV93-W799-CJ2W: Remote Code Execution via Config Section Injection in GitPython Vulnerability ID: GHSA-MV93-W799-CJ2W CVSS Score: 7.8 Published: 2026-05-08 GitPython versions prior to 3.1.50 are vulnerable to a newline injection attack in the ...00
