# Hex Advisories.

Every Hex Advisory we hold (Elixir · Erlang), newest first.

## Records, newest first (an older page)

- [HTTP/2 frame size limit checked after body is buffered in bandit](https://agentprime.io/advisories/GHSA-q6v9-r226-v65f.md)
  `GHSA-q6v9-r226-v65f`, `CVE-2026-42788`, `EEF-CVE-2026-42788` · Hex `bandit`: affected `>=0.3.6, <1.11.0`, fixed in `1.11.0` · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service
- [Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy](https://agentprime.io/advisories/GHSA-q8x4-x7mp-5vg2.md)
  `GHSA-q8x4-x7mp-5vg2`, `CVE-2026-32688`, `EEF-CVE-2026-32688` · Hex `plug_cowboy`: affected `>=2.0.0, <2.8.1`, fixed in `2.8.1` · CVSS 8.7 High · Not analysed yet · Published 27 Apr 2026 · Tags: Denial of service
- [Multipart form body parser bypasses body size limits in wisp](https://agentprime.io/advisories/GHSA-8645-p2v4-73r2.md)
  `GHSA-8645-p2v4-73r2`, `CVE-2026-32145`, `EEF-CVE-2026-32145` · Hex `wisp`: affected `>=0.2.0, <2.2.2`, fixed in `2.2.2` · CVSS 8.7 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [ewe Has Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting)](https://agentprime.io/advisories/GHSA-x2w3-23jr-hrpf.md)
  `GHSA-x2w3-23jr-hrpf`, `CVE-2026-34715` · Hex `ewe`: affected `<3.0.6`, fixed in `3.0.6` · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Other injection
- [Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash](https://agentprime.io/advisories/GHSA-jjf9-w5vj-r6vp.md)
  `GHSA-jjf9-w5vj-r6vp`, `CVE-2026-34593` · Hex `ash`: affected `<3.22.0`, fixed in `3.22.0` · CVSS 8.2 High · Not analysed yet · Published 1 Apr 2026 · Tags: Denial of service
- [elixir-nodejs has Cross-User Data Leakage or Information Disclosure due to Worker Protocol Race Condition](https://agentprime.io/advisories/GHSA-rwcr-rpcc-3g9m.md)
  `GHSA-rwcr-rpcc-3g9m`, `CVE-2026-33872` · Hex `nodejs`: affected `<3.1.4`, fixed in `3.1.4` · CVSS 7.1 High · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition
- [XXE in esaml SAML library allows local file read and potential SSRF](https://agentprime.io/advisories/GHSA-4g2h-vm7x-747c.md)
  `GHSA-4g2h-vm7x-747c`, `CVE-2026-28809`, `EEF-CVE-2026-28809` · Hex `esaml`: affected `*`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: XML external entities (XXE)
- [Loop with Unreachable Exit Condition ('Infinite Loop') in ewe](https://agentprime.io/advisories/GHSA-4w98-xf39-23gp.md)
  `GHSA-4w98-xf39-23gp`, `CVE-2026-32873` · Hex `ewe`: affected `>=0.8.0, <3.0.5`, fixed in `3.0.5` · CVSS 7.5 High · Not analysed yet · Published 16 Mar 2026 · Tags: Memory corruption, Denial of service
- [Permissive List of Allowed Inputs in ewe](https://agentprime.io/advisories/GHSA-9w88-79f8-m3vp.md)
  `GHSA-9w88-79f8-m3vp`, `CVE-2026-32881` · Hex `ewe`: affected `>=0.6.0, <3.0.5`, fixed in `3.0.5` · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-183
- [Path Traversal in wisp.serve_static allows arbitrary file read](https://agentprime.io/advisories/GHSA-h7cj-j2vv-qw8r.md)
  `GHSA-h7cj-j2vv-qw8r`, `CVE-2026-28807`, `EEF-CVE-2026-28807` · Hex `wisp`: affected `>=2.1.1, <2.2.1`, fixed in `2.2.1` · CVSS 8.7 High · Not analysed yet · Published 10 Mar 2026 · Tags: Path traversal
- [Unsafe Deserialization of Erlang Terms in hex_core](https://agentprime.io/advisories/GHSA-hx9w-f2w9-9g96.md)
  `GHSA-hx9w-f2w9-9g96`, `CVE-2026-21619`, `EEF-CVE-2026-21619` · Hex `hex_core`: affected `>=0.1.0, <0.12.1`, fixed in `0.12.1` · CVSS 2.0 Low · Not analysed yet · Published 27 Feb 2026 · Tags: Denial of service, Insecure deserialization
- [ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay](https://agentprime.io/advisories/GHSA-6gvq-jcmp-8959.md)
  `GHSA-6gvq-jcmp-8959`, `CVE-2025-68113`, `GO-2025-4239`, `PKSA-5rb8-j658-qvzz`, `PYSEC-2026-1115` · Go `github.com/altcha-org/altcha-lib-go` and 6 more: affected `<1.0.0`, fixed in `1.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Weak cryptography or TLS, CWE-115
- [Authorization bypass when bypass policy condition evaluates to true](https://agentprime.io/advisories/GHSA-pcxq-fjp3-r752.md)
  `GHSA-pcxq-fjp3-r752`, `CVE-2025-48044`, `EEF-CVE-2025-48044` · Hex `ash`: affected `>=3.6.3, <3.7.1`, fixed in `3.7.1` · CVSS 8.6 High · Not analysed yet · Published 17 Oct 2025 · Tags: Broken access control
- [Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization](https://agentprime.io/advisories/GHSA-7r7f-9xpj-jmr7.md)
  `GHSA-7r7f-9xpj-jmr7`, `CVE-2025-48043`, `EEF-CVE-2025-48043` · Hex `ash`: affected `>=0.1.1, <3.6.2`, fixed in `3.6.2` · CVSS 8.6 High · Not analysed yet · Published 10 Oct 2025 · Tags: Broken access control
- [Before action hooks may execute in certain scenarios despite a request being forbidden](https://agentprime.io/advisories/GHSA-jj4j-x5ww-cwh9.md)
  `GHSA-jj4j-x5ww-cwh9`, `CVE-2025-48042`, `EEF-CVE-2025-48042` · Hex `ash`: affected `>=0.1.1, <3.5.39`, fixed in `3.5.39` · CVSS 7.1 High · Not analysed yet · Published 7 Sept 2025 · Tags: Broken access control
- [Missing Session Revocation on Logout in ash_authentication_phoenix](https://agentprime.io/advisories/GHSA-f7gq-h8jv-h3cq.md)
  `GHSA-f7gq-h8jv-h3cq`, `CVE-2025-4754`, `EEF-CVE-2025-4754` · Hex `ash_authentication_phoenix`: affected `>=0.1.0, <2.10.0`, fixed in `2.10.0` · CVSS 2.3 Low · Not analysed yet · Published 17 Jun 2025 · Tags: Authentication bypass
- [Hackney fails to properly release HTTP connections to the pool](https://agentprime.io/advisories/GHSA-9fm9-hp7p-53mf.md)
  `GHSA-9fm9-hp7p-53mf`, `CVE-2025-3864` · Hex `hackney`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 2.3 Low · Not analysed yet · Published 28 May 2025 · Tags: Denial of service
- [ash_authentication has email link auto-click account confirmation vulnerability](https://agentprime.io/advisories/GHSA-3988-q8q7-p787.md)
  `GHSA-3988-q8q7-p787`, `CVE-2025-32782` · Hex `ash_authentication`: affected `<4.7.0`, fixed in `4.7.0` · CVSS 5.3 Medium · Not analysed yet · Published 14 Apr 2025 · Tags: Authentication bypass
- [Ash Authentication has flawed token revocation checking logic in actions generated by \`mix ash_authentication.install\`](https://agentprime.io/advisories/GHSA-qrm9-f75w-hg4c.md)
  `GHSA-qrm9-f75w-hg4c`, `CVE-2025-25202` · Hex `ash_authentication`: affected `>=4.1.0, <4.4.9`, fixed in `4.4.9` · CVSS 6.3 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Privilege escalation
- [Server-side Request Forgery (SSRF) in hackney](https://agentprime.io/advisories/GHSA-vq52-99r9-h5pw.md)
  `GHSA-vq52-99r9-h5pw`, `CVE-2025-1211` · Hex `hackney`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 6.3 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Server-side request forgery (SSRF)
- [RabbitMQ HTTP API's queue deletion endpoint does not verify that the user has a required permission](https://agentprime.io/advisories/GHSA-pj33-75x5-32j4.md)
  `GHSA-pj33-75x5-32j4`, `BIT-rabbitmq-2024-51988`, `CVE-2024-51988` · Hex `rabbit_common`: affected `>=3.12.7, <3.12.11`, fixed in `3.12.11` · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Broken access control
- [In AshPostgres, empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.](https://agentprime.io/advisories/GHSA-hf59-7rwq-785m.md)
  `GHSA-hf59-7rwq-785m`, `CVE-2024-49756` · Hex `ash_postgres`: affected `>=2.0.0, <2.4.10`, fixed in `2.4.10` · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Information disclosure
- [OpenID Connect client Atom Exhaustion in provider configuration worker ets table location](https://agentprime.io/advisories/GHSA-mj35-2rgf-cv8p.md)
  `GHSA-mj35-2rgf-cv8p`, `CVE-2024-31209` · Hex `oidcc`: affected `>=3.0.0, <3.0.2 || >=3.1.0, <3.1.2 || >=3.2.0-beta.1, <3.2.0-beta.3`, fixed in `3.0.2`, `3.1.2`, `3.2.0-beta.3` · CVSS 5.3 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: Denial of service
- [erlang-jose vulnerable to denial of service via large p2c value](https://agentprime.io/advisories/GHSA-9mg4-v392-8j68.md)
  `GHSA-9mg4-v392-8j68`, `CVE-2023-50966` · Hex `jose`: affected `<1.11.7`, fixed in `1.11.7` · CVSS 5.3 Medium · Not analysed yet · Published 19 Mar 2024 · Tags: Denial of service
- [Samly access control vulnerability](https://agentprime.io/advisories/GHSA-h3rw-77w7-92gf.md)
  `GHSA-h3rw-77w7-92gf`, `CVE-2024-25718` · Hex `Samly`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Feb 2024 · Tags: Denial of service, Authentication bypass
- [Pleroma Path Traversal vulnerability](https://agentprime.io/advisories/GHSA-2c28-m2m7-mf55.md)
  `GHSA-2c28-m2m7-mf55`, `CVE-2023-5588` · Hex `pleroma`: affected `<2.5.3`, fixed in `2.5.3` · CVSS 2.6 Low · Not analysed yet · Published 16 Oct 2023 · Tags: Path traversal
- [MTProto proxy remote code execution vulnerability](https://agentprime.io/advisories/GHSA-738q-mc72-2q22.md)
  `GHSA-738q-mc72-2q22`, `CVE-2023-45312` · Hex `mtproto_proxy`: affected `<=0.7.2`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 10 Oct 2023 · Tags: Code injection, CWE-1188
- [Pow Mnesia cache doesn't invalidate all expired keys on startup](https://agentprime.io/advisories/GHSA-3cjh-p6pw-jhv9.md)
  `GHSA-3cjh-p6pw-jhv9`, `CVE-2023-42446` · Hex `pow`: affected `>=1.0.14, <1.0.34`, fixed in `1.0.34` · CVSS 6.5 Medium · Not analysed yet · Published 19 Sept 2023 · Tags: CWE-298, CWE-672
- [Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows](https://agentprime.io/advisories/GHSA-564w-97r7-c6p9.md)
  `GHSA-564w-97r7-c6p9`, `CVE-2023-35174` · Hex `livebook`: affected `>=0.8.0, <0.8.2 || >=0.9.0, <0.9.3`, fixed in `0.8.2`, `0.9.3` · CVSS 8.6 High · Not analysed yet · Published 21 Jun 2023 · Tags: Command injection
- [phoenix_html allows Cross-site Scripting in HEEx class attributes](https://agentprime.io/advisories/GHSA-5g2h-9x5v-5h3x.md)
  `GHSA-5g2h-9x5v-5h3x`, `CVE-2021-46871`, `GHSA-j3gg-r6gp-95q2` · Hex `phoenix_html` and 1 more: affected `<3.0.4`, fixed in `3.0.4` · CVSS 6.1 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Cross-site scripting (XSS)
- [Duplicate Advisory: Ecto lacks a protection mechanism](https://agentprime.io/advisories/GHSA-4r2f-6fm9-2qgh.md)
  `GHSA-4r2f-6fm9-2qgh` · Hex `ecto`: affected `>=2.2.0, <2.2.1`, fixed in `2.2.1` · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 10 Jan 2023
- [Phoenix before 1.6.14 mishandles check_origin wildcarding](https://agentprime.io/advisories/GHSA-p8f7-22gq-m7j9.md)
  `GHSA-p8f7-22gq-m7j9`, `CVE-2022-42975` · Hex `phoenix`: affected `<1.6.14`, fixed in `1.6.14` · CVSS 7.5 High · Not analysed yet · Published 17 Oct 2022 · Tags: Broken access control, CWE-346
- [ecdsa-elixir fails to check signatures, vulnerable to message forging](https://agentprime.io/advisories/GHSA-xx36-6rv4-gj8r.md)
  `GHSA-xx36-6rv4-gj8r`, `CVE-2021-43568` · Hex `ecdsa-elixir`: affected `>=1.0.0, <1.0.1`, fixed in `1.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS
- [Pivotal RabbitMQ is vulnerable to a denial of service attack](https://agentprime.io/advisories/GHSA-hrfh-7j5f-8ccr.md)
  `GHSA-hrfh-7j5f-8ccr`, `CVE-2019-11287` · Hex `RabbitMQ`: affected `<1.16.7 || >=1.17.0, <1.17.4 || >=3.7.0, <3.7.21 || >=3.8.0, <3.8.1`, fixed in `1.16.7`, `1.17.4`, `3.7.21`, `3.8.1` · CVSS 4.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Memory corruption, Denial of service
- [Cross-site Scripting in RabbitMQ](https://agentprime.io/advisories/GHSA-9pf7-f47q-mwpq.md)
  `GHSA-9pf7-f47q-mwpq`, `CVE-2019-11291` · Hex `rabbit_common`: affected `>=3.7.0, <3.7.20 || >=3.8.0, <3.8.1`, fixed in `3.7.20`, `3.8.1` · CVSS 3.1 Low · Not analysed yet · Published 24 May 2022 · Tags: Cross-site scripting (XSS)
- [Ejabberd DoS via malformed stanza](https://agentprime.io/advisories/GHSA-2h3q-v47h-f4rc.md)
  `GHSA-2h3q-v47h-f4rc`, `CVE-2011-4320` · Hex `ejabberd`: affected `<2.1.9 || >=3.0.0-alpha-1, <3.0.0-alpha-4`, fixed in `2.1.9`, `3.0.0-alpha-4` · No CVSS score · Not analysed yet · Published 17 May 2022 · Tags: Denial of service
- [Erlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream](https://agentprime.io/advisories/GHSA-5v5w-44w6-q5hv.md)
  `GHSA-5v5w-44w6-q5hv`, `CVE-2014-2829` · Hex `MongooseIM`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 4.0, no score published · Not analysed yet · Published 17 May 2022 · Tags: Denial of service
- [puppetlabs-rabbitmq allows local users to obtain sensitive information](https://agentprime.io/advisories/GHSA-h3gh-978r-747w.md)
  `GHSA-h3gh-978r-747w`, `CVE-2014-9568` · Hex `puppetlabs-rabbitmq`: affected `>=3.0, <5.0`, fixed in `5.0` · No CVSS score · Not analysed yet · Published 14 May 2022 · Tags: Information disclosure
- [alchemist.vim vulnerable to remote code execution](https://agentprime.io/advisories/GHSA-6x65-vqp7-5r63.md)
  `GHSA-6x65-vqp7-5r63`, `CVE-2017-1000212` · Hex `alchemist.vim`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2022
- [Hex authenticity of signed packages not validated](https://agentprime.io/advisories/GHSA-q3cc-rr2c-87r6.md)
  `GHSA-q3cc-rr2c-87r6`, `CVE-2019-1000013` · Hex `hex_core`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 8.8 High · Not analysed yet · Published 13 May 2022 · Tags: CWE-345
- [Inline DTD allows XML bomb attack](https://agentprime.io/advisories/GHSA-qpmc-wprv-x746.md)
  `GHSA-qpmc-wprv-x746`, `CVE-2019-15160` · Hex `sweet_xml`: affected `<0.7.0`, fixed in `0.7.0` · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2022 · Tags: XML external entities (XXE), Denial of service
- [Denial of service](https://agentprime.io/advisories/GHSA-5653-437f-5hmc.md)
  `GHSA-5653-437f-5hmc`, `CVE-2019-16764`, `GHSA-368c-xvrv-x986` · Hex `pow_assent`: affected `<0.4.4`, fixed in `0.4.4` · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2022 · Tags: Denial of service
- [Session fixation](https://agentprime.io/advisories/GHSA-v2wf-c3j6-wpvw.md)
  `GHSA-v2wf-c3j6-wpvw`, `CVE-2020-5205` · Hex `pow`: affected `<1.0.16`, fixed in `1.0.16` · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2022 · Tags: Authentication bypass
- [Header Injection](https://agentprime.io/advisories/GHSA-9h73-w7ch-rh73.md)
  `GHSA-9h73-w7ch-rh73`, `CVE-2018-1000883` · Hex `plug`: affected `<1.0.6 || >=1.1.0, <1.1.9 || >=1.2.0, <1.2.5 || >=1.3.0, <1.3.5`, fixed in `1.0.6`, `1.1.9`, `1.2.5`, `1.3.5` · CVSS 6.5 Medium · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-20
- [Arbitrary Code Execution in Cookie Serialization](https://agentprime.io/advisories/GHSA-5v4m-c73v-c7gq.md)
  `GHSA-5v4m-c73v-c7gq`, `CVE-2017-1000053` · Hex `plug`: affected `<1.0.4 || >=1.1.0, <1.1.7 || >=1.2.0, <1.2.3 || >=1.3.0, <1.3.2`, fixed in `1.0.4`, `1.1.7`, `1.2.3`, `1.3.2` · CVSS 8.1 High · Not analysed yet · Published 12 Apr 2022 · Tags: Insecure deserialization
- [Null Byte Injection in Plug.Static](https://agentprime.io/advisories/GHSA-2q6v-32mr-8p8x.md)
  `GHSA-2q6v-32mr-8p8x`, `CVE-2017-1000052` · Hex `plug`: affected `<1.0.4 || >=1.1.0, <1.1.7 || >=1.2.0, <1.2.3 || >=1.3.0, <1.3.2`, fixed in `1.0.4`, `1.1.7`, `1.2.3`, `1.3.2` · CVSS 7.8 High · Not analysed yet · Published 12 Apr 2022 · Tags: Other injection
- [Cross-site Scripting in xain](https://agentprime.io/advisories/GHSA-5chx-gg25-v37m.md)
  `GHSA-5chx-gg25-v37m`, `CVE-2018-20302` · Hex `xain`: affected `<0.6.2`, fixed in `0.6.2` · CVSS 6.1 Medium · Not analysed yet · Published 12 Apr 2022 · Tags: Cross-site scripting (XSS)
- [Phoenix Arbitrary URL Redirect](https://agentprime.io/advisories/GHSA-cmfh-8f8r-fj96.md)
  `GHSA-cmfh-8f8r-fj96`, `CVE-2017-1000163` · Hex `phoenix`: affected `<1.0.6 || >=1.1.0, <1.1.8 || >=1.2.0, <1.2.3`, fixed in `1.0.6`, `1.1.8`, `1.2.3` · CVSS 6.1 Medium · Not analysed yet · Published 12 Apr 2022 · Tags: Open redirect
- [Ecto missing \`is_nil\` requirement](https://agentprime.io/advisories/GHSA-2xxx-fhc8-9qvq.md)
  `GHSA-2xxx-fhc8-9qvq`, `CVE-2017-20166` · Hex `ecto`: affected `>=2.2.0, <2.2.1`, fixed in `2.2.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-754
- [Remote Code Execution in paginator](https://agentprime.io/advisories/GHSA-w98m-2xqg-9cvj.md)
  `GHSA-w98m-2xqg-9cvj`, `CVE-2020-15150` · Hex `paginator`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Apr 2022 · Tags: Code injection
- [Permissive parameters and privilege escalation](https://agentprime.io/advisories/GHSA-mrq8-53r4-3j5m.md)
  `GHSA-mrq8-53r4-3j5m`, `CVE-2018-20301` · Hex `coherence`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2022 · Tags: CWE-20

Newest: <https://agentprime.io/advisories/ecosystem/hex.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=Hex&cursor=WyIyMDI2LTA1LTAxVDIwOjM0OjE3LjAxNDAwMFoiLCJHSFNBLXBmOTQtOTRtOS01MzZwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/hex/?cursor=WyIyMDI2LTA1LTAxVDIwOjM0OjE3LjAxNDAwMFoiLCJHSFNBLXBmOTQtOTRtOS01MzZwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.