PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
High severity
GitHub Reviewed
Published
Jun 17, 2026
in
MervinPraison/PraisonAI
•
Updated Jul 20, 2026
Give feedback on Dependabot alerts