# CWE-1188.

Every Advisory and CVE whose sources give the weakness CWE-1188, newest first.

## Records, newest first (an older page)

- [HCL BigFix SaaS Remediate is affected by a security vulnerability](https://agentprime.io/advisories/CVE-2025-52622.md)
  `CVE-2025-52622` · CVE record: HCL Software BigFix SaaS Remediate · CVSS 5.4 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-1188
- [Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default](https://agentprime.io/advisories/GHSA-9h52-p55h-vw2f.md)
  `GHSA-9h52-p55h-vw2f`, `CVE-2025-66416`, `PYSEC-2026-1617` · PyPI `mcp`: affected `<1.23.0`, fixed in `1.23.0` · CVSS 7.6 High · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-350, CWE-1188
- [Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default](https://agentprime.io/advisories/GHSA-w48q-cv73-mx4w.md)
  `GHSA-w48q-cv73-mx4w`, `CVE-2025-66414` · npm `@modelcontextprotocol/sdk`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 7.6 High · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-350, CWE-1188
- [Ray's New Token Authentication is Disabled By Default](https://agentprime.io/advisories/GHSA-gx77-xgc2-4888.md)
  `GHSA-gx77-xgc2-4888`, `CVE-2025-34351`, `PYSEC-2026-518` · PyPI `ray`: affected `<=2.52.0`, no fixed version yet · CVSS 4.0, no score published · Not analysed yet · Published 27 Nov 2025 · Tags: Authentication bypass, CWE-1188
- [Vault’s Terraform Provider incorrectly set default deny_null_bind parameter for LDAP auth method to false by default](https://agentprime.io/advisories/GHSA-gmm6-j2g5-r52m.md)
  `GHSA-gmm6-j2g5-r52m`, `CVE-2025-13357`, `GO-2025-4152` · Go `github.com/hashicorp/terraform-provider-vault`: affected `<5.5.0`, fixed in `5.5.0` · CVSS 7.4 High · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-1188
- [Abilis CPX Fallback Shell Connection Relay](https://agentprime.io/advisories/CVE-2025-35021.md)
  `CVE-2025-35021` · CVE record: Abilis CPX · CVSS 6.5 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-1188
- [DNN CKEditor Provider allows unauthenticated upload out-of-the-box](https://agentprime.io/advisories/GHSA-2374-6cvw-qmx6.md)
  `GHSA-2374-6cvw-qmx6`, `CVE-2025-62802` · NuGet `Dnn.Platform`: affected `<10.1.1`, fixed in `10.1.1` · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Unrestricted file upload, CWE-1188
- [Jenkins Eggplant Runner Plugin protection mechanism disabled](https://agentprime.io/advisories/GHSA-w5r3-gr8w-7fj5.md)
  `GHSA-w5r3-gr8w-7fj5`, `CVE-2025-64135` · Maven `io.jenkins.plugins:eggplant-runner`: affected `<=0.0.1.301.v963cffe8ddb`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: CWE-1188
- [An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the admin…](https://agentprime.io/advisories/CVE-2025-61481.md)
  `CVE-2025-61481` · CVE record · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2025 · Tags: Information disclosure, Weak cryptography or TLS, CWE-1188
- [VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)](https://agentprime.io/advisories/CVE-2025-41245.md)
  `CVE-2025-41245` · CVE record: VMware VMware Aria Operations and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 29 Sept 2025 · Tags: CWE-1188
- [H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials.](https://agentprime.io/advisories/CVE-2025-57295.md)
  `CVE-2025-57295` · CVE record · CVSS 8.0 High · Not analysed yet · Published 18 Sept 2025 · Tags: Hard-coded credentials, CWE-1188
- [Liferay has Insecure Default Initialization of Resource issue](https://agentprime.io/advisories/GHSA-25m3-w28p-v3v3.md)
  `GHSA-25m3-w28p-v3v3`, `CVE-2025-43797` · Maven `com.liferay:com.liferay.site.admin.web`: affected `<5.0.111`, fixed in `5.0.111` · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-1188
- [WAGO: Vulnerability in hardware switch circuit](https://agentprime.io/advisories/CVE-2025-41713.md)
  `CVE-2025-41713` · CVE record: WAGO CC100 0751-9301 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-1188
- [IBM Fusion insecure default configuration](https://agentprime.io/advisories/CVE-2025-36222.md)
  `CVE-2025-36222` · CVE record: IBM Fusion and 2 more · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2025 · Tags: CWE-1188
- [Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)](https://agentprime.io/advisories/CVE-2025-59044.md)
  `CVE-2025-59044` · CVE record: himmelblau-idm himmelblau · CVSS 4.4 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1188
- [In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value.](https://agentprime.io/advisories/CVE-2025-32330.md)
  `CVE-2025-32330` · CVE record: Google Android · CVSS 5.7 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-1188
- [Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-7353.md)
  `CVE-2025-7353` · CVE record: Rockwell Automation 1756-EN2T/D and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1188
- [NodeJS version of HAX CMS Has Insecure Default Configuration That Leads to Unauthenticated Access](https://agentprime.io/advisories/GHSA-f38f-jvqj-mfg6.md)
  `GHSA-f38f-jvqj-mfg6`, `CVE-2025-54127` · npm `@haxtheweb/haxcms-nodejs`: affected `<11.0.7`, fixed in `11.0.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-1188
- [OCPP Backend Configuration via Insecure Defaults](https://agentprime.io/advisories/CVE-2025-25271.md)
  `CVE-2025-25271` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1188
- [WAGO: Vulnerability in WAGO Device Sphere](https://agentprime.io/advisories/CVE-2025-41672.md)
  `CVE-2025-41672` · CVE record: WAGO Wago Device Sphere · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-1188
- [Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint](https://agentprime.io/advisories/GHSA-794x-8x6x-qpfc.md)
  `GHSA-794x-8x6x-qpfc`, `CVE-2025-53602` · Maven `io.zipkin:zipkin-server`: affected `<=3.5.1`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-1188
- [Versa Director: The Versa Director software exposes a number of services by default and allow attackers…](https://agentprime.io/advisories/CVE-2025-24288.md)
  `CVE-2025-24288` · CVE record: Versa Director · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2025 · Tags: CWE-1188
- [Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default](https://agentprime.io/advisories/CVE-2025-41438.md)
  `CVE-2025-41438` · CVE record: Consilium Safety CS5000 Fire Panel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2025 · Tags: CWE-1188
- [TeleMessage service: The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an…](https://agentprime.io/advisories/CVE-2025-48927.md)
  `CVE-2025-48927` · CVE record: TeleMessage service · CVSS 5.3 Medium · Critical (KEV) · In CISA KEV · EPSS 0.12 · Not analysed yet · Published 28 May 2025 · Tags: CWE-1188
- [Donetick Has Weak Default JWT Secret](https://agentprime.io/advisories/CVE-2025-47945.md)
  `CVE-2025-47945` · CVE record: donetick donetick · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 May 2025 · Tags: CWE-453, CWE-1188
- [Siemens IEC 1Ph 7.4kW Child socket: A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0)…](https://agentprime.io/advisories/CVE-2025-31930.md)
  `CVE-2025-31930` · CVE record: Siemens IEC 1Ph 7.4kW Child socket and 4 more · CVSS 8.7 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-1188
- [\[pgpool\] Unauthenticated access to postgres through pgpool](https://agentprime.io/advisories/CVE-2025-22248.md)
  `CVE-2025-22248` · CVE record: VMware Bitnami · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2025 · Tags: CWE-1188
- [CNCF K3s Kubernetes kubelet configuration exposes credentials](https://agentprime.io/advisories/GHSA-864f-7xjm-2jp2.md)
  `GHSA-864f-7xjm-2jp2`, `CVE-2025-46599`, `GO-2025-3646` · Go `github.com/k3s-io/k3s`: affected `>=1.32.0-rc1, <1.32.4-rc1`, fixed in `1.32.4-rc1` · CVSS 6.8 Medium · Not analysed yet · Published 25 Apr 2025 · Tags: CWE-1188
- [Insecure default settings for recorder products](https://agentprime.io/advisories/CVE-2025-1863.md)
  `CVE-2025-1863` · CVE record: Yokogawa Electric Corporation GX10 / GX20 / GP10 / GP20 Paperless Recorders and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-1188
- [In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces](https://agentprime.io/advisories/CVE-2025-43015.md)
  `CVE-2025-43015` · CVE record: JetBrains RubyMine · CVSS 8.3 High · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-1188
- [Shopware default newsletter opt-in settings allow for mass sign-up abuse](https://agentprime.io/advisories/GHSA-4h9w-7vfp-px8m.md)
  `GHSA-4h9w-7vfp-px8m`, `CVE-2025-32378`, `PKSA-7zw7-y79b-kv9s`, `PKSA-8vfm-96b7-t9nt` · Packagist `shopware/core` and 1 more: affected `<6.5.8.17 || >=6.6.0.0-rc1, <6.6.10.3 || >=6.7.0.0-rc1, <6.7.0.0-rc2`, fixed in `6.5.8.17`, `6.6.10.3`, `6.7.0.0-rc2` · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-799, CWE-1188
- [CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to unauthorized access which could result in the loss of confidentially, integrity and…](https://agentprime.io/advisories/CVE-2025-2442.md)
  `CVE-2025-2442` · CVE record: Schneider Electric Trio Q Licensed Data Radio · CVSS 5.4 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-1188
- [CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confidentiality when a malicious user, having physical access, sets the radio in factor…](https://agentprime.io/advisories/CVE-2025-2441.md)
  `CVE-2025-2441` · CVE record: Schneider Electric Trio Q Licensed Data Radio · CVSS 4.1 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-1188
- [Zoom Workplace Apps for Windows - Insecure Default Variable Initialization](https://agentprime.io/advisories/CVE-2025-27443.md)
  `CVE-2025-27443` · CVE record: Zoom Communications, Inc Zoom Workplace Apps for Windows · CVSS 2.8 Low · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-1188
- [Dell Common Event Enabler: Dell Common Event Enabler, version(s) CEE 9.0.0.0…](https://agentprime.io/advisories/CVE-2025-29985.md)
  `CVE-2025-29985` · CVE record: Dell Common Event Enabler · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-1188
- [Default or Guessable SNMP community names in B&R APROL](https://agentprime.io/advisories/CVE-2024-8313.md)
  `CVE-2024-8313` · CVE record: B&R Industrial Automation GmbH APROL · CVSS 8.7 High · Not analysed yet · Published 25 Mar 2025 · Tags: Information disclosure, CWE-1188
- [mbedtls: Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side…](https://agentprime.io/advisories/CVE-2025-27809.md)
  `CVE-2025-27809` · CVE record: Mbed mbedtls · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2025 · Tags: CWE-1188
- [CODESYS (Edge) Gateway for Windows insecure default](https://agentprime.io/advisories/CVE-2024-41975.md)
  `CVE-2024-41975` · CVE record: CODESYS CODESYS Edge Gateway and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Mar 2025 · Tags: CWE-1188
- [CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized commands when a system’s default password credentials have no…](https://agentprime.io/advisories/CVE-2025-1960.md)
  `CVE-2025-1960` · CVE record: Schneider Electric WebHMI – Deployed with EcoStruxure Power Automation System · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-1188
- [Mage AI insecure default initialization of resource](https://agentprime.io/advisories/CVE-2025-2129.md)
  `CVE-2025-2129` · CVE record: Mage AI · CVSS 6.3 Medium · Not analysed yet · Published 9 Mar 2025 · Tags: CWE-1188
- [QHora](https://agentprime.io/advisories/CVE-2024-50390.md)
  `CVE-2024-50390` · CVE record: QNAP Systems Inc. QuRouter · CVSS 7.7 High · Not analysed yet · Published 7 Mar 2025 · Tags: Command injection, CWE-1188
- [Insecure default configurations in HI-SCAN 6040i Hitrax HX-03-19-I allow authenticated attackers with low-level privileges to escalate to root-level privileges.](https://agentprime.io/advisories/CVE-2024-48122.md)
  `CVE-2024-48122` · CVE record · CVSS 6.7 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1188
- [shadow-maint shadow-utils: shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior…](https://agentprime.io/advisories/CVE-2024-56433.md)
  `CVE-2024-56433` · CVE record: shadow-maint shadow-utils · CVSS 3.6 Low · Not analysed yet · Published 26 Dec 2024 · Tags: CWE-1188
- [Filament has exported files stored in default (\`public\`) filesystem if not reconfigured](https://agentprime.io/advisories/GHSA-4hxw-gc2q-f6f3.md)
  `GHSA-4hxw-gc2q-f6f3`, `CVE-2024-51758`, `PKSA-1ds2-yqqr-64g1` · Packagist `filament/actions`: affected `>=3.2.0, <3.2.123`, fixed in `3.2.123` · CVSS 2.3 Low · Not analysed yet · Published 7 Nov 2024 · Tags: CWE-1188
- [An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14.](https://agentprime.io/advisories/CVE-2020-11917.md)
  `CVE-2020-11917` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 7 Nov 2024 · Tags: CWE-1188
- [Asio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with no associated error information from the SSL library being used.](https://agentprime.io/advisories/CVE-2019-25219.md)
  `CVE-2019-25219` · CVE record · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2024 · Tags: CWE-1188
- [Denial of Service in Forescout SecureConnector](https://agentprime.io/advisories/CVE-2024-9949.md)
  `CVE-2024-9949` · CVE record: Forescout SecureConnector · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1188
- [HCL Sametime is impacted by insecure services](https://agentprime.io/advisories/CVE-2024-30124.md)
  `CVE-2024-30124` · CVE record: HCL Software Sametime · CVSS 4.0 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1188
- [Insecure Default Initialization of Resource vulnerability in Apache Solr](https://agentprime.io/advisories/GHSA-h7w9-c5vx-x7j3.md)
  `GHSA-h7w9-c5vx-x7j3`, `BIT-solr-2024-45217`, `CVE-2024-45217` · Maven `org.apache.solr:solr`: affected `>=6.6.0, <8.11.4 || >=9.0.0, <9.7.0`, fixed in `8.11.4`, `9.7.0` · CVSS 8.1 High · Not analysed yet · Published 16 Oct 2024 · Tags: CWE-1188
- [SEIKO EPSON CORPORATION Web Config: Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote…](https://agentprime.io/advisories/CVE-2024-47295.md)
  `CVE-2024-47295` · CVE record: SEIKO EPSON CORPORATION Web Config · CVSS 8.1 High · Not analysed yet · Published 1 Oct 2024 · Tags: CWE-1188
- [Pure Storage FlashArray: A condition exists in FlashArray Purity whereby a local account intended for initial…](https://agentprime.io/advisories/CVE-2024-0001.md)
  `CVE-2024-0001` · CVE record: Pure Storage FlashArray · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2024 · Tags: CWE-1188
- [Mozilla Firefox: Firefox normally asks for confirmation before asking the operating system to find an…](https://agentprime.io/advisories/CVE-2024-8383.md)
  `CVE-2024-8383` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2024 · Tags: CWE-1188
- [Insecure default setting for Server Pro installed via Overleaf toolkit](https://agentprime.io/advisories/CVE-2024-45313.md)
  `CVE-2024-45313` · CVE record: overleaf overleaf · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2024 · Tags: Broken access control, CWE-1188
- [In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value.](https://agentprime.io/advisories/CVE-2024-34734.md)
  `CVE-2024-34734` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-1188
- [IP Forwarding enabled in B&R Automation Runtime](https://agentprime.io/advisories/CVE-2024-5801.md)
  `CVE-2024-5801` · CVE record: B&R Industrial Automation Automation Runtime · CVSS 5.3 Medium · Not analysed yet · Published 10 Aug 2024 · Tags: CWE-653, CWE-1188
- [Ricoh Company, Ltd. JavaTM Platform: Initialization of a resource with an insecure default vulnerability exists in JavaTM…](https://agentprime.io/advisories/CVE-2024-41995.md)
  `CVE-2024-41995` · CVE record: Ricoh Company, Ltd. JavaTM Platform · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-1188
- [Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker t…](https://agentprime.io/advisories/CVE-2024-31070.md)
  `CVE-2024-31070` · CVE record: Century Systems Co., Ltd. FutureNet NXR-1300 series and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2024 · Tags: CWE-1188
- [Degraded secret zeroization capabilities](https://agentprime.io/advisories/GHSA-c3hm-hxwf-g5c6.md)
  `GHSA-c3hm-hxwf-g5c6`, `CVE-2024-34063`, `RUSTSEC-2024-0342` · crates.io `vodozemac`: affected `>=0.5.0, <0.6.0`, fixed in `0.6.0` · CVSS 2.5 Low · Not analysed yet · Published 2 May 2024 · Tags: CWE-1188
- [Apache ActiveMQ's default configuration doesn't secure the API web context](https://agentprime.io/advisories/GHSA-gj5m-m88j-v7c3.md)
  `GHSA-gj5m-m88j-v7c3`, `BIT-activemq-2024-32114`, `CVE-2024-32114` · Maven `org.apache.activemq:apache-activemq`: affected `>=6.0.0, <6.1.2`, fixed in `6.1.2` · CVSS 8.5 High · Not analysed yet · Published 2 May 2024 · Tags: CWE-1188
- [Insecure deserialization in BentoML](https://agentprime.io/advisories/GHSA-hvj5-mvw9-93j3.md)
  `GHSA-hvj5-mvw9-93j3`, `CVE-2024-2912`, `PYSEC-2026-296` · PyPI `bentoml`: affected `<1.2.5`, fixed in `1.2.5` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-1188

Newest: <https://agentprime.io/advisories/tag/cwe-1188.md>
Older: <https://agentprime.io/advisories/tag/cwe-1188.md?cursor=WyIyMDI0LTA0LTE2VDAwOjMwOjMzLjAwMDAwMFoiLCJHSFNBLWh2ajUtbXZ3OS05M2ozIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1188&cursor=WyIyMDI1LTEyLTA4VDE2OjU3OjM4LjI4MTAwMFoiLCJDVkUtMjAyNS00ODYyMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1188/?cursor=WyIyMDI1LTEyLTA4VDE2OjU3OjM4LjI4MTAwMFoiLCJDVkUtMjAyNS00ODYyMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.