# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter](https://agentprime.io/advisories/GHSA-rp9g-qx29-88cp.md)
  `GHSA-rp9g-qx29-88cp`, `CVE-2026-22729` · Maven `org.springframework.ai:spring-ai-vector-store`: affected `>=1.1.0-M1, <1.1.3 || <1.0.4`, fixed in `1.1.3`, `1.0.4` · CVSS 8.6 High · Not analysed yet · Published 18 Mar 2026 · Tags: Code injection
- [itsourcecode University Management System add_result.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4356.md)
  `CVE-2026-4356` · CVE record: itsourcecode University Management System · CVSS 4.8 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4355.md)
  `CVE-2026-4355` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [TRENDnet TEW-824DRU Web apply_sec.cgi sub_420A78 cross site scripting](https://agentprime.io/advisories/CVE-2026-4354.md)
  `CVE-2026-4354` · CVE record: TRENDnet TEW-824DRU · CVSS 5.1 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Code injection in Atlassian Bamboo Data Center](https://agentprime.io/advisories/CVE-2026-21570.md)
  `CVE-2026-21570` · CVE record: Atlassian Bamboo Data Center · CVSS 8.6 High · Not analysed yet · Published 17 Mar 2026 · Tags: Code injection
- [jsPDF has a PDF Object Injection via FreeText color](https://agentprime.io/advisories/GHSA-7x6v-j9x4-qf24.md)
  `GHSA-7x6v-j9x4-qf24`, `CVE-2026-31898` · npm `jspdf`: affected `<4.2.1`, fixed in `4.2.1` · CVSS 8.1 High · Not analysed yet · Published 17 Mar 2026 · Tags: Code injection, CWE-116
- [Chamilo LMS: Authenticated RCE via H5P Import](https://agentprime.io/advisories/CVE-2026-30875.md)
  `CVE-2026-30875` · CVE record: chamilo chamilo-lms · CVSS 8.8 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController](https://agentprime.io/advisories/GHSA-4484-8v2f-5748.md)
  `GHSA-4484-8v2f-5748`, `CVE-2026-32264`, `PKSA-1qxd-z2sm-yssc` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.17.5 || >=5.0.0-RC1, <5.9.11`, fixed in `4.17.5`, `5.9.11` · CVSS 8.6 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [Craft CMS vulnerable to behavior injection RCE via EntryTypesController](https://agentprime.io/advisories/GHSA-qx2q-q59v-wf3j.md)
  `GHSA-qx2q-q59v-wf3j`, `CVE-2026-32263`, `PKSA-1n2n-7k4d-96rt` · Packagist `craftcms/cms`: affected `>=5.6.0, <5.9.11`, fixed in `5.9.11` · CVSS 8.6 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin](https://agentprime.io/advisories/GHSA-8wg7-wm29-2rvg.md)
  `GHSA-8wg7-wm29-2rvg`, `CVE-2026-32261`, `PKSA-fnz6-639n-kpcq` · Packagist `craftcms/webhooks`: affected `>=3.0.0, <3.2.0`, fixed in `3.2.0` · CVSS 8.5 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler](https://agentprime.io/advisories/GHSA-76c2-3q6g-xvpm.md)
  `GHSA-76c2-3q6g-xvpm`, `CVE-2026-4175`, `PKSA-nj38-h5v2-sqrz` · Packagist `aureuserp/aureuserp`: affected `<1.3.0-BETA1`, fixed in `1.3.0-BETA1` · CVSS 5.1 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [MLflow has a command injection in mlflow/sagemaker/\_\_init\_\_.py](https://agentprime.io/advisories/GHSA-xch3-2f9x-wh9f.md)
  `GHSA-xch3-2f9x-wh9f`, `BIT-mlflow-2025-14287`, `CVE-2025-14287`, `PYSEC-2026-2661` · PyPI `mlflow`: affected `<3.8.0rc0`, fixed in `3.8.0rc0` · CVSS 7.5 High · Not analysed yet · Published 16 Mar 2026 · Tags: Command injection, Code injection
- [Lagom WHMCS Template Datatables prototype pollution](https://agentprime.io/advisories/CVE-2026-4239.md)
  `CVE-2026-4239` · CVE record: Lagom WHMCS Template · CVSS 5.1 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection, Prototype pollution
- [Authenticated RCE in Raytha CMS](https://agentprime.io/advisories/CVE-2025-15540.md)
  `CVE-2025-15540` · CVE record: Raytha Raytha · CVSS 8.6 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026](https://agentprime.io/advisories/CVE-2026-3476.md)
  `CVE-2026-3476` · CVE record: Dassault Systèmes SOLIDWORKS Desktop · CVSS 7.8 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [CMS Made Simple User Management listusers.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4225.md)
  `CVE-2026-4225` · CVE record: CMS Made Simple · CVSS 4.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.](https://agentprime.io/advisories/CVE-2025-69902.md)
  `CVE-2025-69902` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [The \`flow/admin/moniteur.php\` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.](https://agentprime.io/advisories/CVE-2025-50881.md)
  `CVE-2025-50881` · CVE record · CVSS 8.8 High · Not analysed yet · Published 16 Mar 2026 · Tags: Code injection
- [UEditor JSONP Callback controller.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4186.md)
  `CVE-2026-4186` · CVE record: UEditor · CVSS 5.1 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting](https://agentprime.io/advisories/CVE-2026-4169.md)
  `CVE-2026-4169` · CVE record: Tecnick TCExam · CVSS 4.8 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Tecnick TCExam Group tce_edit_group.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4168.md)
  `CVE-2026-4168` · CVE record: Tecnick TCExam · CVSS 4.8 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting](https://agentprime.io/advisories/CVE-2026-4166.md)
  `CVE-2026-4166` · CVE record: Wavlink WL-NU516U1 · CVSS 5.1 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Worksuite HR, CRM and Project Management create cross site scripting](https://agentprime.io/advisories/CVE-2026-4165.md)
  `CVE-2026-4165` · CVE record: Worksuite HR, CRM and Project Management · CVSS 4.8 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [AnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Import](https://agentprime.io/advisories/CVE-2026-32719.md)
  `CVE-2026-32719` · CVE record: Mintplex-Labs anything-llm · CVSS 4.2 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Path traversal, Code injection
- [SimpleEval: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox](https://agentprime.io/advisories/GHSA-44vg-5wv2-h2hg.md)
  `GHSA-44vg-5wv2-h2hg`, `CVE-2026-32640`, `PYSEC-2026-132` · PyPI `simpleeval`: affected `<1.0.5`, fixed in `1.0.5` · CVSS 8.7 High · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection, Broken access control
- [Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware](https://agentprime.io/advisories/GHSA-cwxj-rr6w-m6w7.md)
  `GHSA-cwxj-rr6w-m6w7`, `CVE-2026-105782`, `PYSEC-2026-4299` · PyPI `scrapy`: affected `>=1.4.0, <2.14.2`, fixed in `2.14.2` · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection
- [JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering](https://agentprime.io/advisories/CVE-2026-31864.md)
  `CVE-2026-31864` · CVE record: jumpserver jumpserver · CVSS 6.8 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection
- [Locutus vulnerable to RCE via unsanitized input in create_function()](https://agentprime.io/advisories/GHSA-vh9h-29pq-r5m8.md)
  `GHSA-vh9h-29pq-r5m8`, `CVE-2026-32304` · npm `locutus`: affected `<3.0.14`, fixed in `3.0.14` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Mar 2026 · Tags: Command injection, Code injection
- [SandboxJS affected by a Sandbox Escape](https://agentprime.io/advisories/GHSA-6r9f-759j-hjgv.md)
  `GHSA-6r9f-759j-hjgv`, `CVE-2026-26954` · npm `@nyariv/sandboxjs`: affected `<0.8.34`, fixed in `0.8.34` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection
- [WordPress Advanced Woo Labels plugin <= 2.36 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-32414.md)
  `CVE-2026-32414` · CVE record: ILLID Advanced Woo Labels · CVSS 7.2 High · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection
- [WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-32367.md)
  `CVE-2026-32367` · CVE record: Yannick Lefebvre Modal Dialog · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection
- [Beghelli Sicuro24 SicuroWeb AngularJS Template Injection](https://agentprime.io/advisories/CVE-2026-22191.md)
  `CVE-2026-22191` · CVE record: Beghelli SicuroWeb (Sicuro24) · CVSS 5.1 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Code injection
- [itsourcecode Payroll Management System manage_employee_deductions.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3993.md)
  `CVE-2026-3993` · CVE record: itsourcecode Payroll Management System · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [CesiumGS CesiumJS standalone.html cross site scripting](https://agentprime.io/advisories/CVE-2026-3990.md)
  `CVE-2026-3990` · CVE record: CesiumGS CesiumJS · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Campcodes Division Regional Athletic Meet Game Result Matrix System save_up_athlete.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3984.md)
  `CVE-2026-3984` · CVE record: Campcodes Division Regional Athletic Meet Game Result Matrix System · CVSS 5.1 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Campcodes Division Regional Athletic Meet Game Result Matrix System save-games.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3983.md)
  `CVE-2026-3983` · CVE record: Campcodes Division Regional Athletic Meet Game Result Matrix System · CVSS 5.1 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [itsourcecode University Management System view_result.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3982.md)
  `CVE-2026-3982` · CVE record: itsourcecode University Management System · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [AutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection](https://agentprime.io/advisories/CVE-2026-3968.md)
  `CVE-2026-3968` · CVE record: AutohomeCorp frostmourne · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Other injection, Code injection
- [HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an O…](https://agentprime.io/advisories/CVE-2026-25817.md)
  `CVE-2026-25817` · CVE record · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2026 · Tags: Code injection
- [Jcharis Machine-Learning-Web-Apps Jinja2 Template app.py render_template cross site scripting](https://agentprime.io/advisories/CVE-2026-3962.md)
  `CVE-2026-3962` · CVE record: Jcharis Machine-Learning-Web-Apps · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [elecV2P jsfile Endpoint wbjs.js runJSFile code injection](https://agentprime.io/advisories/CVE-2026-3955.md)
  `CVE-2026-3955` · CVE record: elecV2P · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Other injection, Code injection
- [LockerProject Locker Error Response registry.js authIsAwesome cross site scripting](https://agentprime.io/advisories/CVE-2026-3951.md)
  `CVE-2026-3951` · CVE record: LockerProject Locker · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [NetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp](https://agentprime.io/advisories/CVE-2019-25468.md)
  `CVE-2019-25468` · CVE record: NetGain Systems NetGain EM Plus · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2026 · Tags: Code injection
- [PHPEMS index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3946.md)
  `CVE-2026-3946` · CVE record: PHPEMS · CVSS 5.1 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [CraftCMS has an RCE vulnerability via relational conditionals in the control panel](https://agentprime.io/advisories/GHSA-fp5j-j7j4-mcxc.md)
  `GHSA-fp5j-j7j4-mcxc`, `CVE-2026-31857`, `PKSA-w79g-q9vy-mw7b` · Packagist `craftcms/cms`: affected `>=4.0.0-beta.1, <4.17.4 || >=5.0.0-RC1, <5.9.9`, fixed in `4.17.4`, `5.9.9` · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2026 · Tags: Code injection
- [Code injection in Micro Research Ltd. MR-GM5L-S1 and others](https://agentprime.io/advisories/CVE-2026-20892.md)
  `CVE-2026-20892` · CVE record: Micro Research Ltd. MR-GM5L-S1 and 1 more · CVSS 8.6 High · Not analysed yet · Published 11 Mar 2026 · Tags: Code injection
- [A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.](https://agentprime.io/advisories/CVE-2026-30741.md)
  `CVE-2026-30741` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2026 · Tags: Code injection
- [Lantronix EDS5000, G520, and X300 OS Command Injection](https://agentprime.io/advisories/CVE-2025-67037.md)
  `CVE-2025-67037` · CVE record: Lantronix EDS5000 series and 2 more · CVSS 8.6 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection, Code injection
- [Lantronix EDS5000, G520, and X300 OS Command Injection](https://agentprime.io/advisories/CVE-2025-67036.md)
  `CVE-2025-67036` · CVE record: Lantronix EDS5000 series and 2 more · CVSS 8.6 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection, Code injection
- [Lantronix EDS5000 OS Command Injection](https://agentprime.io/advisories/CVE-2025-67035.md)
  `CVE-2025-67035` · CVE record: Lantronix EDS5000 series · CVSS 8.6 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection, Code injection
- [Lantronix EDS5000, G520, and X300 OS Command Injection](https://agentprime.io/advisories/CVE-2025-67034.md)
  `CVE-2025-67034` · CVE record: Lantronix EDS5000 series and 2 more · CVSS 8.6 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection, Code injection
- [@siteboon/claude-code-ui is Vulnerable to Shell Command Injection in Git Routes](https://agentprime.io/advisories/GHSA-7fv4-fmmc-86g2.md)
  `GHSA-7fv4-fmmc-86g2`, `CVE-2026-31861` · npm `@siteboon/claude-code-ui`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 8.7 High · Not analysed yet · Published 10 Mar 2026 · Tags: Code injection
- [Code injection in Schneider Electric EcoStruxure™ Automation Expert](https://agentprime.io/advisories/CVE-2026-2273.md)
  `CVE-2026-2273` · CVE record: Schneider Electric EcoStruxure™ Automation Expert · CVSS 7.2 High · Not analysed yet · Published 10 Mar 2026 · Tags: Code injection
- [Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others](https://agentprime.io/advisories/CVE-2025-40943.md)
  `CVE-2025-40943` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Code injection
- [AzuraCast: RCE via Liquidsoap string interpolation injection in station metadata and playlist URLs](https://agentprime.io/advisories/GHSA-93fx-5qgc-wr38.md)
  `GHSA-93fx-5qgc-wr38`, `CVE-2026-100857`, `PKSA-p9gy-8v98-hsfy` · Packagist `azuracast/azuracast`: affected `<0.23.4`, fixed in `0.23.4` · CVSS 8.6 High · Not analysed yet · Published 9 Mar 2026 · Tags: Code injection
- [SourceCodester Resort Reservation System Reservation Management page cross site scripting](https://agentprime.io/advisories/CVE-2026-3819.md)
  `CVE-2026-3819` · CVE record: SourceCodester Resort Reservation System · CVSS 5.1 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Apache IoTDB has an Improper Input Validation vulnerability](https://agentprime.io/advisories/GHSA-6w48-2g9j-v9q5.md)
  `GHSA-6w48-2g9j-v9q5`, `CVE-2026-24713` · Maven `org.apache.iotdb:iotdb-core`: affected `>=1.0.0, <1.3.7 || >=2.0.0, <2.0.7`, fixed in `1.3.7`, `2.0.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Mar 2026 · Tags: Code injection, CWE-20
- [itsourcecode Payroll Management System manage_employee_allowances.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3812.md)
  `CVE-2026-3812` · CVE record: itsourcecode Payroll Management System · CVSS 5.3 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3766.md)
  `CVE-2026-3766` · CVE record: SourceCodester Web-based Pharmacy Product Management System · CVSS 5.1 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting](https://agentprime.io/advisories/CVE-2026-3763.md)
  `CVE-2026-3763` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTAzLTA4VDE5OjAyOjA4LjIwNDAwMFoiLCJDVkUtMjAyNi0zNzYzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTAzLTE4VDIwOjA4OjA2LjAwMDAwMFoiLCJHSFNBLXB4cnItaHE1Ny1xMzVwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTAzLTE4VDIwOjA4OjA2LjAwMDAwMFoiLCJHSFNBLXB4cnItaHE1Ny1xMzVwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.