agentprime: CWE-1100Every new CWE-1100 Advisory and CVE.https://agentprime.io/vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`https://agentprime.io/advisories/GHSA-9qj6-qjgg-37qq/https://agentprime.io/advisories/GHSA-9qj6-qjgg-37qq/vm2 <3.11.2, fixed in 3.11.2. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 08 May 2026 15:58:48 GMTnpmvm2criticalvm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command executionhttps://agentprime.io/advisories/GHSA-8hg8-63c5-gwmx/https://agentprime.io/advisories/GHSA-8hg8-63c5-gwmx/vm2 <3.11.1, fixed in 3.11.1. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 07 May 2026 05:13:21 GMTnpmvm2criticalCVE-2025-3466: Unsanitized Input in langgenius/difyhttps://agentprime.io/advisories/CVE-2025-3466/https://agentprime.io/advisories/CVE-2025-3466/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 09:55:28 GMTCVEcriticalOpen WebUI Has Improper Access Control Leading to Arbitrary Prompt Readhttps://agentprime.io/advisories/GHSA-c7fq-p62p-wvpc/https://agentprime.io/advisories/GHSA-c7fq-p62p-wvpc/open-webui <=0.3.8, no fixed version yet. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 20 Mar 2025 12:32:46 GMTPyPIopen-webuiCVE-2024-9612: Unauthorized Access in danswer-ai/danswerhttps://agentprime.io/advisories/CVE-2024-9612/https://agentprime.io/advisories/CVE-2024-9612/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:08 GMTCVE