VYPR

LinearBot

by PraisonAI

CVEs (1)

  • CVE-2026-56837higJun 18, 2026
    risk 0.45cvss epss

    # PraisonAI LinearBot processes unsigned webhooks when `LINEAR_WEBHOOK_SECRET` is missing ## Summary PraisonAI's LinearBot starts a public webhook listener on `0.0.0.0` and treats `LINEAR_WEBHOOK_SECRET` as optional. When the secret is absent, startup only logs a warning and…