agentprime: CWE-1023

CVE-2026-121949: Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass

Thu, 05 Nov 2026 17:46:04 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121564: Silent loss of messages when merging overlapping chat exports in whatstk

Tue, 03 Nov 2026 15:24:43 GMT

CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91768: IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

Fri, 25 Sep 2026 21:07:30 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85491: Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

Thu, 24 Sep 2026 21:54:04 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92611: Incorrect authorization in Eclipse Foundation Eclipse Ankaios

Thu, 17 Sep 2026 10:34:44 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91836: OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors

Tue, 15 Sep 2026 14:45:11 GMT

CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81376: Visual Studio Code Security Feature Bypass Vulnerability

Tue, 08 Sep 2026 17:13:57 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14199: Session takeover via Auth Proxy cache key collision

Wed, 02 Sep 2026 16:06:28 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

Thu, 27 Aug 2026 17:03:56 GMT

cakephp/queue >=0.1.10, <2.3.1, fixed in 2.3.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

Thu, 20 Aug 2026 18:38:50 GMT

backpack/crud >=6.0.0, <6.8.14 || >=7.0.0, <7.0.38, fixed in 6.8.14, 7.0.38. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-24255: NVIDIA Dynamo: NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache…

Tue, 04 Aug 2026 17:23:47 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Trusted retry endpoint checks could match hostname prefixes

Thu, 02 Jul 2026 17:22:11 GMT

openclaw <2026.5.7, fixed in 2026.5.7. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently

Thu, 18 Jun 2026 20:11:31 GMT

openclaw <2026.5.26, fixed in 2026.5.26. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes

Mon, 15 Jun 2026 16:46:53 GMT

symfony/html-sanitizer >=6.1.0, <6.4.41 || >=7.0.0, <7.4.13 || >=8.0.0, <8.0.13, fixed in 6.4.41, 7.4.13, 8.0.13. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-7473: Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

Fri, 05 Jun 2026 16:22:47 GMT

CVSS 6.9 (Medium). Critical: In CISA’s KEV catalogue since 9 Jun 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.

Django: has_vary_header may expose cached responses when Vary values contain whitespace

Wed, 03 Jun 2026 15:30:43 GMT

django <5.2.15 || >=6.0.0, <6.0.6, fixed in 5.2.15, 6.0.6. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-4748: pf silently ignores certain rules

Wed, 01 Apr 2026 06:18:52 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

Mon, 23 Mar 2026 06:30:29 GMT

jsrsasign >=7.0.0, <11.1.1, fixed in 11.1.1. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-62000: BullWall Ransomware Containment incomplete file inspection

Thu, 18 Dec 2025 20:32:02 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-55333: Windows BitLocker Security Feature Bypass Vulnerability

Tue, 14 Oct 2025 17:00:13 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

Wed, 28 May 2025 18:03:41 GMT

vllm >=0.7.0, <0.9.0, fixed in 0.9.0. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-5528: Incomplete Comparison with Missing Factors in GitLab

Wed, 05 Feb 2025 10:31:06 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-23146: An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.

Thu, 18 Nov 2021 17:59:56 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.