Four attributes left out of PraisonAI's subprocess blocklist

CVE-2026-39888: PraisonAI's subprocess blocklist omitted four frame-traversal attributes, letting caught exceptions carry model-generated code back to the real builtins dictionary.