<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1007</title><description>Every new CWE-1007 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense</title><link>https://agentprime.io/advisories/GHSA-v3wm-qf9p-c549/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-v3wm-qf9p-c549/</guid><description>symfony/html-sanitizer &gt;=6.1.0, &lt;6.4.41 || &gt;=7.0.0, &lt;7.4.13 || &gt;=8.0.0, &lt;8.0.13, fixed in 6.4.41, 7.4.13, 8.0.13. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jun 2026 17:32:59 GMT</pubDate><category>Packagist</category><category>symfony/html-sanitizer</category><category>symfony/symfony</category></item><item><title>Symfony&apos;s HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing</title><link>https://agentprime.io/advisories/GHSA-h5vq-qfcg-4m6p/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h5vq-qfcg-4m6p/</guid><description>symfony/html-sanitizer &gt;=6.1.0, &lt;6.4.40 || &gt;=7.0.0, &lt;7.4.12 || &gt;=8.0.0, &lt;8.0.12, fixed in 6.4.40, 7.4.12, 8.0.12. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 20:04:22 GMT</pubDate><category>Packagist</category><category>symfony/html-sanitizer</category><category>symfony/symfony</category></item><item><title>Homograph attack allows Unicode lookalike characters to bypass validation.</title><link>https://agentprime.io/advisories/GHSA-xq7p-g2vc-g82p/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xq7p-g2vc-g82p/</guid><description>base-x &lt;3.0.11 || &gt;=4.0.0, &lt;4.0.1 || &gt;=5.0.0, &lt;5.0.1, fixed in 3.0.11, 4.0.1, 5.0.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 16:34:59 GMT</pubDate><category>npm</category><category>base-x</category></item><item><title>CVE-2025-0996: Google Chrome: Inappropriate implementation in Browser UI in Google Chrome on Android prior to…</title><link>https://agentprime.io/advisories/CVE-2025-0996/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0996/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Feb 2025 01:17:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-4221: Mozilla Firefox: If a domain name contained a RTL character…</title><link>https://agentprime.io/advisories/CVE-2021-4221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-4221/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Dec 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>