<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1254</title><description>Every new CWE-1254 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28929: A logic issue was addressed with improved checks.</title><link>https://agentprime.io/advisories/CVE-2026-28929/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28929/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 20:08:09 GMT</pubDate><category>CVE</category></item><item><title>CI4MS: Account Deactivation Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)</title><link>https://agentprime.io/advisories/GHSA-8fq3-c5w3-pj3q/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8fq3-c5w3-pj3q/</guid><description>ci4-cms-erp/ci4ms &lt;0.31.0.0, fixed in 0.31.0.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Apr 2026 22:09:39 GMT</pubDate><category>Packagist</category><category>ci4-cms-erp/ci4ms</category></item><item><title>CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)</title><link>https://agentprime.io/advisories/GHSA-4vxv-4xq4-p84h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-4vxv-4xq4-p84h/</guid><description>ci4-cms-erp/ci4ms &lt;0.31.0.0, fixed in 0.31.0.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Apr 2026 22:08:29 GMT</pubDate><category>Packagist</category><category>ci4-cms-erp/ci4ms</category></item><item><title>OpenClaw&apos;s sandbox config hash sorted primitive arrays and suppressed needed container recreation</title><link>https://agentprime.io/advisories/GHSA-xxvh-5hwj-42pp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xxvh-5hwj-42pp/</guid><description>openclaw &lt;2026.2.15, fixed in 2026.2.15. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Feb 2026 22:44:10 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>CVE-2013-10031: Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks</title><link>https://agentprime.io/advisories/CVE-2013-10031/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2013-10031/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 00:12:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39308: GoCD API authentication of user access tokens subject to timing attack during comparison</title><link>https://agentprime.io/advisories/CVE-2022-39308/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39308/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js</title><link>https://agentprime.io/advisories/GHSA-34r7-q49f-h37c/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-34r7-q49f-h37c/</guid><description>uglify-js &lt;2.4.24, fixed in 2.4.24. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Oct 2017 18:33:36 GMT</pubDate><category>npm</category><category>uglify-js</category><category>RubyGems</category><category>uglifier</category><category>critical</category></item><item><title>Doorkeeper is vulnerable to replay attacks</title><link>https://agentprime.io/advisories/GHSA-3m6r-39p3-jq25/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3m6r-39p3-jq25/</guid><description>doorkeeper &lt;4.2.0, fixed in 4.2.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Oct 2017 18:33:35 GMT</pubDate><category>RubyGems</category><category>doorkeeper</category><category>critical</category></item></channel></rss>