<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1050</title><description>Every new CWE-1050 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-85977: Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding</title><link>https://agentprime.io/advisories/CVE-2026-85977/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85977/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 18:20:43 GMT</pubDate><category>CVE</category></item><item><title>kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression</title><link>https://agentprime.io/advisories/GHSA-h4r5-mxv5-8mjc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h4r5-mxv5-8mjc/</guid><description>github.com/getkin/kin-openapi &gt;=0.145.0, &lt;0.146.0, fixed in 0.146.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 20:18:15 GMT</pubDate><category>Go</category><category>github.com/getkin/kin-openapi</category></item><item><title>CVE-2026-94287: Denial of service via unsigned underflow in libXpm&apos;s write path</title><link>https://agentprime.io/advisories/CVE-2026-94287/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94287/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Sep 2026 08:57:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees</title><link>https://agentprime.io/advisories/CVE-2026-81736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-81736/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Sep 2026 13:44:28 GMT</pubDate><category>CVE</category></item><item><title>league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension</title><link>https://agentprime.io/advisories/GHSA-8rr7-cvq3-gmfh/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8rr7-cvq3-gmfh/</guid><description>league/commonmark &gt;=1.5.0, &lt;2.10.0, fixed in 2.10.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 20:28:40 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item><item><title>league/commonmark: Denial of service in the SmartPunct and Attributes extensions</title><link>https://agentprime.io/advisories/GHSA-jjv6-8j6v-6j52/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jjv6-8j6v-6j52/</guid><description>league/commonmark &gt;=1.5.0, &lt;2.9.1, fixed in 2.9.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 20:21:45 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item><item><title>league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters</title><link>https://agentprime.io/advisories/GHSA-j8pm-gj4c-rq4x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j8pm-gj4c-rq4x/</guid><description>league/commonmark &gt;=0.6.0, &lt;2.9.1, fixed in 2.9.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 20:17:59 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item><item><title>CVE-2026-52681: Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script.</title><link>https://agentprime.io/advisories/CVE-2026-52681/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52681/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Aug 2026 10:12:30 GMT</pubDate><category>CVE</category></item><item><title>league/commonmark: Quadratic-time denial of service when parsing crafted Markdown</title><link>https://agentprime.io/advisories/GHSA-2q4p-g7hv-5rgv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2q4p-g7hv-5rgv/</guid><description>league/commonmark &gt;=0.6.0, &lt;2.9.0, fixed in 2.9.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 20:37:20 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item><item><title>ws: Memory exhaustion DoS from tiny fragments and data chunks</title><link>https://agentprime.io/advisories/GHSA-96hv-2xvq-fx4p/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-96hv-2xvq-fx4p/</guid><description>ws &gt;=1.1.0, &lt;5.2.5 || &gt;=6.0.0, &lt;6.2.4 || &gt;=7.0.0, &lt;7.5.11 || &gt;=8.0.0, &lt;8.21.0, fixed in 5.2.5, 6.2.4, 7.5.11, 8.21.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jun 2026 16:34:23 GMT</pubDate><category>npm</category><category>ws</category></item><item><title>CVE-2026-44390: Unbounded name compression in certain cases causes degradation of service</title><link>https://agentprime.io/advisories/CVE-2026-44390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44390/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 May 2026 09:21:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41292: Long list of incoming EDNS options degrades performance</title><link>https://agentprime.io/advisories/CVE-2026-41292/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41292/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 May 2026 09:19:13 GMT</pubDate><category>CVE</category></item><item><title>Keycloak: Application-Level DoS via Scope Processing</title><link>https://agentprime.io/advisories/GHSA-h4wv-g838-66g3/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h4wv-g838-66g3/</guid><description>org.keycloak:keycloak-services &lt;26.5.7, fixed in 26.5.7. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 15:31:39 GMT</pubDate><category>Maven</category><category>org.keycloak:keycloak-services</category></item><item><title>CVE-2026-22263: Suricata http1: quadratic complexity in headers parsing over multiple packets</title><link>https://agentprime.io/advisories/CVE-2026-22263/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22263/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Jan 2026 18:27:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-22261: Suricata eve/alert: http1 xff handling can lead to denial of service</title><link>https://agentprime.io/advisories/CVE-2026-22261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22261/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Jan 2026 18:10:27 GMT</pubDate><category>CVE</category></item><item><title>evershop allows unauthenticated attackers to exhaust application server&apos;s resources via &quot;GET /images&quot; API</title><link>https://agentprime.io/advisories/GHSA-m2q5-xhqg-92r2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-m2q5-xhqg-92r2/</guid><description>@evershop/evershop &lt;=2.1.0, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Jan 2026 21:30:33 GMT</pubDate><category>npm</category><category>@evershop/evershop</category></item><item><title>CVE-2025-48866: ModSecurity has possible DoS vulnerability in sanitiseArg action</title><link>https://agentprime.io/advisories/CVE-2025-48866/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-48866/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Jun 2025 15:46:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47947: ModSecurity Has Possible DoS Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-47947/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47947/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 May 2025 22:08:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32907: Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header</title><link>https://agentprime.io/advisories/CVE-2025-32907/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32907/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Apr 2025 14:00:09 GMT</pubDate><category>CVE</category></item><item><title>Uncontrolled resource consumption in braces</title><link>https://agentprime.io/advisories/GHSA-grv7-fg5c-xmjg/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-grv7-fg5c-xmjg/</guid><description>braces &lt;3.0.3, fixed in 3.0.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 14 May 2024 18:30:54 GMT</pubDate><category>npm</category><category>braces</category></item><item><title>CVE-2023-1390: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module.</title><link>https://agentprime.io/advisories/CVE-2023-1390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1390/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Excessive Platform Resource Consumption within a Loop in Kubernetes</title><link>https://agentprime.io/advisories/GHSA-wxc4-f4m6-wwqv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wxc4-f4m6-wwqv/</guid><description>github.com/go-yaml/yaml &lt;=2.1.0, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Dec 2021 16:55:06 GMT</pubDate><category>Go</category><category>github.com/go-yaml/yaml</category><category>gopkg.in/yaml.v2</category></item><item><title>CVE-2021-41039: The Eclipse Foundation Eclipse Mosquitto: In versions 1.6 to 2.0.11 of Eclipse Mosquitto…</title><link>https://agentprime.io/advisories/CVE-2021-41039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41039/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Dec 2021 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>