<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1035</title><description>Every new CWE-1035 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93562: Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling</title><link>https://agentprime.io/advisories/CVE-2026-93562/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93562/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 20:12:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93579: Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)</title><link>https://agentprime.io/advisories/CVE-2026-93579/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93579/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:38:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93566: Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line</title><link>https://agentprime.io/advisories/CVE-2026-93566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93566/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:19:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93565: Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte</title><link>https://agentprime.io/advisories/CVE-2026-93565/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93565/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:18:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93564: Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)</title><link>https://agentprime.io/advisories/CVE-2026-93564/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93564/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:13:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93558: Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service</title><link>https://agentprime.io/advisories/CVE-2026-93558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93558/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:09:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93560: Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos</title><link>https://agentprime.io/advisories/CVE-2026-93560/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93560/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 13:44:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93492: Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size</title><link>https://agentprime.io/advisories/CVE-2026-93492/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93492/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 12:49:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93563: Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos</title><link>https://agentprime.io/advisories/CVE-2026-93563/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93563/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 10:58:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93578: Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass</title><link>https://agentprime.io/advisories/CVE-2026-93578/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93578/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 10:53:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93575: Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder</title><link>https://agentprime.io/advisories/CVE-2026-93575/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93575/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 10:53:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93561: Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling</title><link>https://agentprime.io/advisories/CVE-2026-93561/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93561/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 10:02:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93494: Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated</title><link>https://agentprime.io/advisories/CVE-2026-93494/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93494/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 07:39:17 GMT</pubDate><category>CVE</category></item></channel></rss>