agentprime: CWE-1275Every new CWE-1275 Advisory and CVE.https://agentprime.io/CVE-2026-78188: WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributeshttps://agentprime.io/advisories/CVE-2026-78188/https://agentprime.io/advisories/CVE-2026-78188/Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 14:33:37 GMTCVEAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukhttps://agentprime.io/advisories/GHSA-f9m8-cv68-674w/https://agentprime.io/advisories/GHSA-f9m8-cv68-674w/org.asynchttpclient:async-http-client >=3.0.0, <3.0.13 || >=2.0.0, <2.16.1, fixed in 3.0.13, 2.16.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 08 Oct 2026 16:30:53 GMTMavenorg.asynchttpclient:async-http-clientCVE-2026-107229: AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hostshttps://agentprime.io/advisories/CVE-2026-107229/https://agentprime.io/advisories/CVE-2026-107229/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:57:36 GMTCVEHatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthStatehttps://agentprime.io/advisories/GHSA-phg3-3g28-wq9v/https://agentprime.io/advisories/GHSA-phg3-3g28-wq9v/github.com/hatchet-dev/hatchet <0.91.1, fixed in 0.91.1. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 21 Sep 2026 15:47:01 GMTGogithub.com/hatchet-dev/hatchetHttp4s: CookieJar middleware matches by substring, leaking cookies cross-originhttps://agentprime.io/advisories/GHSA-grh8-3p95-f9rr/https://agentprime.io/advisories/GHSA-grh8-3p95-f9rr/org.http4s:http4s-client_2.12 <0.23.35, fixed in 0.23.35. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 15 Sep 2026 20:00:54 GMTMavenorg.http4s:http4s-client_2.12org.http4s:http4s-client_2.13org.http4s:http4s-client_3@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linkinghttps://agentprime.io/advisories/GHSA-fm3f-ch8h-qw8q/https://agentprime.io/advisories/GHSA-fm3f-ch8h-qw8q/@hono/oauth-providers <0.8.6, fixed in 0.8.6. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 31 Aug 2026 20:30:50 GMTnpm@hono/oauth-providersCVE-2026-47889: Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponsehttps://agentprime.io/advisories/CVE-2026-47889/https://agentprime.io/advisories/CVE-2026-47889/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 05:21:37 GMTCVEAsyncHttpClient stores cookie for an unrelated domain (cookie tossing) via ThreadSafeCookieStorehttps://agentprime.io/advisories/GHSA-m452-q8c9-rg2f/https://agentprime.io/advisories/GHSA-m452-q8c9-rg2f/org.asynchttpclient:async-http-client >=3.0.0.Beta1, <3.0.11 || >=2.0.0, <2.16.0, fixed in 3.0.11, 2.16.0. CVSS 4.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 26 Aug 2026 14:35:52 GMTMavenorg.asynchttpclient:async-http-clientOpenAM Insecure SSO Cookie Initializationhttps://agentprime.io/advisories/GHSA-fpmh-vx4h-xc33/https://agentprime.io/advisories/GHSA-fpmh-vx4h-xc33/org.openidentityplatform.openam:openam-core <16.1.1, fixed in 16.1.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 14 Aug 2026 19:25:57 GMTMavenorg.openidentityplatform.openam:openam-coreCVE-2026-73847: Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeoverhttps://agentprime.io/advisories/CVE-2026-73847/https://agentprime.io/advisories/CVE-2026-73847/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Aug 2026 17:33:02 GMTCVEConcrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorderhttps://agentprime.io/advisories/GHSA-xj25-753j-wgp9/https://agentprime.io/advisories/GHSA-xj25-753j-wgp9/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/deletehttps://agentprime.io/advisories/GHSA-v7c7-658v-hh7v/https://agentprime.io/advisories/GHSA-v7c7-658v-hh7v/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cachehttps://agentprime.io/advisories/GHSA-rv3q-xmfw-mcjv/https://agentprime.io/advisories/GHSA-rv3q-xmfw-mcjv/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id)https://agentprime.io/advisories/GHSA-qj94-6rx6-27fr/https://agentprime.io/advisories/GHSA-qj94-6rx6-27fr/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/designhttps://agentprime.io/advisories/GHSA-mpq2-mv8p-9wm6/https://agentprime.io/advisories/GHSA-mpq2-mv8p-9wm6/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicatehttps://agentprime.io/advisories/GHSA-98qf-jvwj-2r5f/https://agentprime.io/advisories/GHSA-98qf-jvwj-2r5f/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()https://agentprime.io/advisories/GHSA-97jw-gr4m-c5v8/https://agentprime.io/advisories/GHSA-97jw-gr4m-c5v8/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/deletehttps://agentprime.io/advisories/GHSA-752x-23hp-jmv6/https://agentprime.io/advisories/GHSA-752x-23hp-jmv6/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple()https://agentprime.io/advisories/GHSA-6qjh-p324-694f/https://agentprime.io/advisories/GHSA-6qjh-p324-694f/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan()https://agentprime.io/advisories/GHSA-6fxm-r8p3-mx5c/https://agentprime.io/advisories/GHSA-6fxm-r8p3-mx5c/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)https://agentprime.io/advisories/GHSA-67hj-8239-cmf5/https://agentprime.io/advisories/GHSA-67hj-8239-cmf5/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/deletehttps://agentprime.io/advisories/GHSA-56c9-xq5g-xrf9/https://agentprime.io/advisories/GHSA-56c9-xq5g-xrf9/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion()https://agentprime.io/advisories/GHSA-44q4-354f-c826/https://agentprime.io/advisories/GHSA-44q4-354f-c826/concrete5/concrete5 >=9.0.0RC1, <9.5.1, fixed in 9.5.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 22 May 2026 00:31:17 GMTPackagistconcrete5/concrete5CVE-2026-1697: Use of unsecure cookies for GraphicalData web service and WebClient web apphttps://agentprime.io/advisories/CVE-2026-1697/https://agentprime.io/advisories/CVE-2026-1697/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 07:57:46 GMTCVECVE-2025-52628: HCL AION is susceptible to Missing SameSite vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52628/https://agentprime.io/advisories/CVE-2025-52628/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 18:06:41 GMTCVEKimai contains a SameSite cookie vulnerabilityhttps://agentprime.io/advisories/GHSA-cv8h-r7r5-vwj9/https://agentprime.io/advisories/GHSA-cv8h-r7r5-vwj9/kimai/kimai <=1.30.10, no fixed version yet. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 19 Dec 2025 21:30:20 GMTPackagistkimai/kimaiCVE-2025-36134: IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosurehttps://agentprime.io/advisories/CVE-2025-36134/https://agentprime.io/advisories/CVE-2025-36134/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 14:40:55 GMTCVECVE-2024-42212: HCL BigFix Compliance is affected by an improper or missing SameSite attributehttps://agentprime.io/advisories/CVE-2024-42212/https://agentprime.io/advisories/CVE-2024-42212/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 May 2025 18:40:57 GMTCVECVE-2024-30155: HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30155/https://agentprime.io/advisories/CVE-2024-30155/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 07:59:52 GMTCVECVE-2025-24387: Missing CSRF protectionhttps://agentprime.io/advisories/CVE-2025-24387/https://agentprime.io/advisories/CVE-2025-24387/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Mar 2025 09:28:31 GMTCVECVE-2025-24897: Misskey CSRF vulnerability due to insecure configuration of authentication cookie attributeshttps://agentprime.io/advisories/CVE-2025-24897/https://agentprime.io/advisories/CVE-2025-24897/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:20:29 GMTCVECVE-2024-43173: IBM Concert information disclosurehttps://agentprime.io/advisories/CVE-2024-43173/https://agentprime.io/advisories/CVE-2024-43173/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 14:48:21 GMTCVECVE-2024-6611: Incorrect handling of SameSite cookieshttps://agentprime.io/advisories/CVE-2024-6611/https://agentprime.io/advisories/CVE-2024-6611/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 14:25:59 GMTCVEcriticalCVE-2022-38386: IBM Cloud Pak for Security information disclosurehttps://agentprime.io/advisories/CVE-2022-38386/https://agentprime.io/advisories/CVE-2022-38386/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 12:48:12 GMTCVE