# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass](https://agentprime.io/advisories/CVE-2026-77002.md)
  `CVE-2026-77002` · CVE record: Unknown SmilePass Selfie Login · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Aug 2026 · Tags: Authentication bypass
- [Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass](https://agentprime.io/advisories/CVE-2026-77001.md)
  `CVE-2026-77001` · CVE record: Unknown Social Login & Sharing buttons with Analytics By SoClever · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Aug 2026 · Tags: Authentication bypass
- [WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow](https://agentprime.io/advisories/CVE-2026-77000.md)
  `CVE-2026-77000` · CVE record: Unknown WP Social Media Login · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Aug 2026 · Tags: Authentication bypass
- [xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2026-49849.md)
  `CVE-2026-49849` · CVE record: 4xmen xshop · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Unrestricted file upload
- [JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions](https://agentprime.io/advisories/GHSA-66mm-25pp-rfff.md)
  `GHSA-66mm-25pp-rfff`, `CVE-2026-77415` · npm `jsonata`: affected `<1.8.8 || >=2.0.0, <2.2.1`, fixed in `1.8.8`, `2.2.1` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions](https://agentprime.io/advisories/GHSA-2943-5xfg-gq5f.md)
  `GHSA-2943-5xfg-gq5f`, `CVE-2026-77414` · npm `jsonata`: affected `<1.8.8 || >=2.0.0, <2.2.1`, fixed in `1.8.8`, `2.2.1` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [JSONata: Arbitrary Code Execution via crafted JSONata expressions](https://agentprime.io/advisories/GHSA-8gq3-vp5j-2grp.md)
  `GHSA-8gq3-vp5j-2grp`, `CVE-2026-77413` · npm `jsonata`: affected `<1.8.8 || >=2.0.0, <2.2.0`, fixed in `1.8.8`, `2.2.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [Xinference vulnerable to remote code execution via unsafe \`eval()\` in Llama3 tool-call parsing](https://agentprime.io/advisories/GHSA-x2rj-828p-hx9m.md)
  `GHSA-x2rj-828p-hx9m`, `CVE-2026-61539`, `PYSEC-2026-3946` · PyPI `xinference`: affected `<2.7.0`, fixed in `2.7.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [Phalcon Volt compiler \`join\` filter compile-time PHP code injection (SSTI leads to RCE)](https://agentprime.io/advisories/GHSA-hrwp-4hh9-c8r8.md)
  `GHSA-hrwp-4hh9-c8r8`, `CVE-2026-59989`, `PKSA-n2s8-x5tr-m78t` · Packagist `phalcon/cphalcon`: affected `<5.16.0`, fixed in `5.16.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers](https://agentprime.io/advisories/GHSA-mqjf-5f49-2fjh.md)
  `GHSA-mqjf-5f49-2fjh`, `CVE-2026-76904` · Maven `org.geotools.jdbc:gt-jdbc-postgis`: affected `>=35.0, <35.1 || >=34.0, <34.5 || >=30.5, <33.6`, fixed in `35.1`, `34.5`, `33.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: SQL injection
- [Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector](https://agentprime.io/advisories/CVE-2026-77810.md)
  `CVE-2026-77810` · CVE record: AWS Athena Federated Query Neptune Connector · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [Improper input validation in FreeRTOS-Kernel timer command handling](https://agentprime.io/advisories/CVE-2026-77234.md)
  `CVE-2026-77234` · CVE record: FreeRTOS FreeRTOS-Kernel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [net: ipv6: clear suppressed fib6 rule result](https://agentprime.io/advisories/CVE-2026-74581.md)
  `CVE-2026-74581` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026
- [Jet Admin tenant isolation failure](https://agentprime.io/advisories/CVE-2026-75932.md)
  `CVE-2026-75932` · CVE record: Jet Admin Jet Admin · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [Azure SQL Database Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69502.md)
  `CVE-2026-69502` · CVE record: Microsoft Azure SQL Database · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding](https://agentprime.io/advisories/CVE-2026-77087.md)
  `CVE-2026-77087` · CVE record: paperclipai paperclip · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root](https://agentprime.io/advisories/CVE-2026-63343.md)
  `CVE-2026-63343` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal
- [Incus vulnerable to root RCE via image backup.yaml symlink](https://agentprime.io/advisories/CVE-2026-63125.md)
  `CVE-2026-63125` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal, CWE-61
- [Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge](https://agentprime.io/advisories/CVE-2026-62941.md)
  `CVE-2026-62941` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [Incus has a project restriction bypass via instance migration config override](https://agentprime.io/advisories/CVE-2026-62940.md)
  `CVE-2026-62940` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution](https://agentprime.io/advisories/CVE-2026-62867.md)
  `CVE-2026-62867` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Command injection
- [Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE](https://agentprime.io/advisories/CVE-2026-77812.md)
  `CVE-2026-77812` · CVE record: DJI Neo and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Weak cryptography or TLS
- [Code injection in SPIP](https://agentprime.io/advisories/CVE-2026-77806.md)
  `CVE-2026-77806` · CVE record: SPIP SPIP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Code injection
- [Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity](https://agentprime.io/advisories/CVE-2026-77776.md)
  `CVE-2026-77776` · CVE record: Headroom Labs Headroom · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [SiYuan before v3.7.4 Path Traversal via packageName](https://agentprime.io/advisories/CVE-2026-77086.md)
  `CVE-2026-77086` · CVE record: siyuan-note siyuan · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal
- [Comfast CF-N1-S mbox-config system command injection](https://agentprime.io/advisories/CVE-2026-77683.md)
  `CVE-2026-77683` · CVE record: Comfast CF-N1-S · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Other injection, Command injection
- [Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module](https://agentprime.io/advisories/CVE-2026-59085.md)
  `CVE-2026-59085` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI](https://agentprime.io/advisories/CVE-2026-61398.md)
  `CVE-2026-61398` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-116
- [Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation](https://agentprime.io/advisories/CVE-2026-62440.md)
  `CVE-2026-62440` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control
- [Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure](https://agentprime.io/advisories/CVE-2026-77264.md)
  `CVE-2026-77264` · CVE record: 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-640
- [Datiphy Data Management Center - External Control of File Name or Path](https://agentprime.io/advisories/CVE-2026-76158.md)
  `CVE-2026-76158` · CVE record: Datiphy Inc. Data Management Center · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal
- [Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command](https://agentprime.io/advisories/CVE-2026-76156.md)
  `CVE-2026-76156` · CVE record: Datiphy Inc. Data Management Center · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Command injection
- [Datiphy Data Management Center - Use of Default Credentials](https://agentprime.io/advisories/CVE-2026-76155.md)
  `CVE-2026-76155` · CVE record: Datiphy Inc. Data Management Center · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-1392
- [droundy arrayref: The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling…](https://agentprime.io/advisories/CVE-2026-77651.md)
  `CVE-2026-77651` · CVE record: droundy arrayref · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-506
- [droundy append-only-vec: The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when…](https://agentprime.io/advisories/CVE-2026-77650.md)
  `CVE-2026-77650` · CVE record: droundy append-only-vec · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-506
- [droundy internment: The internment crate 0.8.7 for Rust can trigger execution of malicious code when…](https://agentprime.io/advisories/CVE-2026-77649.md)
  `CVE-2026-77649` · CVE record: droundy internment · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-506
- [Code injection in SPIP](https://agentprime.io/advisories/CVE-2026-77647.md)
  `CVE-2026-77647` · CVE record: SPIP SPIP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Code injection
- [Critical Remote Code Execution (RCE) vulnerability reported in Windchill](https://agentprime.io/advisories/CVE-2026-77645.md)
  `CVE-2026-77645` · CVE record: PTC Windchill PDMLink and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Insecure deserialization, CWE-20
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-18835.md)
  `CVE-2026-18835` · CVE record: IBM AIX and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Command injection
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17422.md)
  `CVE-2026-17422` · CVE record: IBM AIX and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover](https://agentprime.io/advisories/CVE-2026-72843.md)
  `CVE-2026-72843` · CVE record: evershopcommerce evershop · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Broken access control
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17160.md)
  `CVE-2026-17160` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17157.md)
  `CVE-2026-17157` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17152.md)
  `CVE-2026-17152` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition](https://agentprime.io/advisories/CVE-2026-77644.md)
  `CVE-2026-77644` · CVE record: PTC Windchill Risk and Reliability Enterprise Edition (Formerly Relex) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Authentication bypass, CWE-620
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17145.md)
  `CVE-2026-17145` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17142.md)
  `CVE-2026-17142` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Authentication bypass
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17141.md)
  `CVE-2026-17141` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17136.md)
  `CVE-2026-17136` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17122.md)
  `CVE-2026-17122` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17118.md)
  `CVE-2026-17118` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17040.md)
  `CVE-2026-17040` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption
- [Azure Arc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69555.md)
  `CVE-2026-69555` · CVE record: Microsoft Azure ARC · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Broken access control
- [Azure Logic Apps Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69400.md)
  `CVE-2026-69400` · CVE record: Microsoft Azure Logic Apps · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal
- [Azure SQL Database Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-68782.md)
  `CVE-2026-68782` · CVE record: Microsoft Azure SQL Database · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: SQL injection
- [Azure SQL Database Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-66309.md)
  `CVE-2026-66309` · CVE record: Microsoft Azure SQL Database · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Broken access control
- [Azure Arc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65816.md)
  `CVE-2026-65816` · CVE record: Microsoft Azure Web Apps · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-706
- [Microsoft Fabric Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-63509.md)
  `CVE-2026-63509` · CVE record: Microsoft Microsoft Fabric · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal
- [Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-65770.md)
  `CVE-2026-65770` · CVE record: Microsoft Azure Managed Instance for Apache Cassandra · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Command injection
- [Microsoft Entra ID Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69836.md)
  `CVE-2026-69836` · CVE record: Microsoft Microsoft Entra · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Insecure deserialization

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA4LTIwVDIxOjQzOjEyLjYxMTAwMFoiLCJDVkUtMjAyNi02OTgzNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA4LTIyVDA4OjEzOjAwLjA5NTAwMFoiLCJDVkUtMjAyNi0xMjcxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA4LTIyVDA4OjEzOjAwLjA5NTAwMFoiLCJDVkUtMjAyNi0xMjcxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.