# Cross-site request forgery (CSRF). A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF](https://agentprime.io/advisories/CVE-2026-14234.md) `CVE-2026-14234` · CVE record: Unknown WOLF · CVSS 7.1 High · Not analysed yet · Published 29 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF) - [Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries](https://agentprime.io/advisories/CVE-2026-15136.md) `CVE-2026-15136` · CVE record: wplegalpages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode · CVSS 4.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages](https://agentprime.io/advisories/GHSA-4j38-rw27-97gx.md) `GHSA-4j38-rw27-97gx`, `CVE-2023-37465` · Maven `org.xwiki.contrib:discussions-server`: affected `<2.0-rc-1`, fixed in `2.0-rc-1` · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-66474.md) `CVE-2026-66474` · CVE record: HT Plugins Insert Headers and Footers Code – HT Script · CVSS 4.3 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-66428.md) `CVE-2026-66428` · CVE record: jgwhite33 WP Google Review Slider · CVSS 4.3 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)](https://agentprime.io/advisories/GHSA-pvcr-8mvp-w8qr.md) `GHSA-pvcr-8mvp-w8qr`, `CVE-2026-72849` · npm `@budibase/server`: affected `<=3.38.1`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), CWE-345 - [React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response](https://agentprime.io/advisories/GHSA-qwww-vcr4-c8h2.md) `GHSA-qwww-vcr4-c8h2` · npm `react-router`: affected `>=7.12.0, <7.18.2 || >=8.0.0, <8.3.0`, fixed in `7.18.2`, `8.3.0` · CVSS 4.0, no score published · Not analysed yet · Published 24 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update](https://agentprime.io/advisories/CVE-2026-15212.md) `CVE-2026-15212` · CVE record: wpo365 WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) · CVSS 8.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57626.md) `CVE-2026-57626` · CVE record: MailPoet MailPoet · CVSS 7.1 High · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65540.md) `CVE-2026-65540` · CVE record: Metin Saraç Popup for CF7 with Sweet Alert · CVSS 7.1 High · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability](https://agentprime.io/advisories/CVE-2026-65539.md) `CVE-2026-65539` · CVE record: Bimal Rekhadiya Kwayy HTML Sitemap · CVSS 7.1 High · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65536.md) `CVE-2026-65536` · CVE record: Mahdi Yousefi افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) · CVSS 6.5 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65512.md) `CVE-2026-65512` · CVE record: Melapress WP Activity Log and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability](https://agentprime.io/advisories/CVE-2026-65488.md) `CVE-2026-65488` · CVE record: LA-Studio LA-Studio Element Kit for Elementor · CVSS 7.1 High · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65471.md) `CVE-2026-65471` · CVE record: Avada Studio Avada Core · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65464.md) `CVE-2026-65464` · CVE record: Nexcess GiveWP · CVSS 5.4 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65460.md) `CVE-2026-65460` · CVE record: zarinpal Zarinpal Gateway · CVSS 4.3 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-61981.md) `CVE-2026-61981` · CVE record: QuantumCloud Simple Link Directory Pro · CVSS 5.4 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57785.md) `CVE-2026-57785` · CVE record: ApusTheme ApusListing · CVSS 8.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57784.md) `CVE-2026-57784` · CVE record: Ninja Forms Ninja Forms File Uploads Extension · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-24537.md) `CVE-2026-24537` · CVE record: Alex Volkov WP Accessibility Helper (WAH) · CVSS 4.3 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension](https://agentprime.io/advisories/CVE-2026-64871.md) `CVE-2026-64871` · CVE record: regularlabs.com Cache Cleaner extension for Joomla · CVSS 5.4 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension](https://agentprime.io/advisories/CVE-2026-65757.md) `CVE-2026-65757` · CVE record: regularlabs.com Modules Anywhere extension for Joomla · CVSS 8.1 High · Not analysed yet · Published 23 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension](https://agentprime.io/advisories/CVE-2026-64876.md) `CVE-2026-64876` · CVE record: regularlabs.com GeoIP extension for Joomla · CVSS 8.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints](https://agentprime.io/advisories/CVE-2026-63265.md) `CVE-2026-63265` · CVE record: regularlabs.com Advanced Module Manager extension for Joomla and 4 more · CVSS 8.0 High · Not analysed yet · Published 22 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager](https://agentprime.io/advisories/CVE-2026-63280.md) `CVE-2026-63280` · CVE record: regularlabs.com Advanced Module Manager extension for Joomla and 3 more · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager](https://agentprime.io/advisories/CVE-2026-64791.md) `CVE-2026-64791` · CVE record: regularlabs.com Regular Labs Extension Manager extension for Joomla · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension](https://agentprime.io/advisories/CVE-2026-63684.md) `CVE-2026-63684` · CVE record: regularlabs.com Content Templater extension for Joomla and 2 more · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Open redirect in Oracle Corporation Oracle Work in Process](https://agentprime.io/advisories/CVE-2026-62563.md) `CVE-2026-62563` · CVE record: Oracle Corporation Oracle Work in Process · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), Open redirect - [Cross-site request forgery in Oracle Corporation Oracle Contracts Integration](https://agentprime.io/advisories/CVE-2026-62487.md) `CVE-2026-62487` · CVE record: Oracle Corporation Oracle Contracts Integration · CVSS 6.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Cross-site request forgery in Oracle Corporation Oracle Contracts Integration](https://agentprime.io/advisories/CVE-2026-62443.md) `CVE-2026-62443` · CVE record: Oracle Corporation Oracle Contracts Integration · CVSS 7.1 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Cross-site request forgery in Oracle Corporation Oracle HRMS (Japanese)](https://agentprime.io/advisories/CVE-2026-61253.md) `CVE-2026-61253` · CVE record: Oracle Corporation Oracle HRMS (Japanese) · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Authentication bypass by spoofing in Oracle Corporation Oracle Security Service](https://agentprime.io/advisories/CVE-2026-61217.md) `CVE-2026-61217` · CVE record: Oracle Corporation Oracle Security Service · CVSS 6.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Authentication bypass, Cross-site request forgery (CSRF) - [Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Program Management](https://agentprime.io/advisories/CVE-2026-61204.md) `CVE-2026-61204` · CVE record: Oracle Corporation PeopleSoft Enterprise FIN Program Management · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Cross-site request forgery (CSRF) - [Cross-site request forgery in Oracle Corporation Oracle Commerce Platform](https://agentprime.io/advisories/CVE-2026-61132.md) `CVE-2026-61132` · CVE record: Oracle Corporation Oracle Commerce Platform · CVSS 7.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Cross-site request forgery in Oracle Corporation Oracle MES for Process Manufacturing](https://agentprime.io/advisories/CVE-2026-61101.md) `CVE-2026-61101` · CVE record: Oracle Corporation Oracle MES for Process Manufacturing · CVSS 8.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Open redirect in Oracle Corporation Oracle Banking Trade Finance Process Management](https://agentprime.io/advisories/CVE-2026-61097.md) `CVE-2026-61097` · CVE record: Oracle Corporation Oracle Banking Trade Finance Process Management · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation MySQL Connectors](https://agentprime.io/advisories/CVE-2026-61082.md) `CVE-2026-61082` · CVE record: Oracle Corporation MySQL Connectors · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Information disclosure, Broken access control, Cross-site request forgery (CSRF), Open redirect - [Improper access control in Oracle Corporation Oracle Flow Manufacturing](https://agentprime.io/advisories/CVE-2026-60962.md) `CVE-2026-60962` · CVE record: Oracle Corporation Oracle Flow Manufacturing · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) - [Open redirect in Oracle Corporation Oracle Transportation Execution](https://agentprime.io/advisories/CVE-2026-60957.md) `CVE-2026-60957` · CVE record: Oracle Corporation Oracle Transportation Execution · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control, Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation Oracle Property Manager](https://agentprime.io/advisories/CVE-2026-60911.md) `CVE-2026-60911` · CVE record: Oracle Corporation Oracle Property Manager · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), Open redirect - [Improper authorization in Oracle Corporation Oracle Work in Process](https://agentprime.io/advisories/CVE-2026-60886.md) `CVE-2026-60886` · CVE record: Oracle Corporation Oracle Work in Process · CVSS 7.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: Information disclosure, Privilege escalation, Broken access control, Cross-site request forgery (CSRF) - [Open redirect in Oracle Corporation Oracle Knowledge Management](https://agentprime.io/advisories/CVE-2026-60842.md) `CVE-2026-60842` · CVE record: Oracle Corporation Oracle Knowledge Management · CVSS 6.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation Oracle iSupport](https://agentprime.io/advisories/CVE-2026-60685.md) `CVE-2026-60685` · CVE record: Oracle Corporation Oracle iSupport · CVSS 6.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60664.md) `CVE-2026-60664` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60658.md) `CVE-2026-60658` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF), Open redirect, CWE-451, CWE-640 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60650.md) `CVE-2026-60650` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60648.md) `CVE-2026-60648` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Weak cryptography or TLS, Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60646.md) `CVE-2026-60646` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-640 - [Cross-site request forgery in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60643.md) `CVE-2026-60643` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60642.md) `CVE-2026-60642` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 7.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60640.md) `CVE-2026-60640` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.3 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60639.md) `CVE-2026-60639` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60638.md) `CVE-2026-60638` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60637.md) `CVE-2026-60637` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60636.md) `CVE-2026-60636` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60635.md) `CVE-2026-60635` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60634.md) `CVE-2026-60634` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Open redirect in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60633.md) `CVE-2026-60633` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), Open redirect, CWE-20 - [Improper access control in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-60631.md) `CVE-2026-60631` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control, Cross-site request forgery (CSRF) Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .