# CWE-1289.

Every Advisory and CVE whose sources give the weakness CWE-1289, newest first.

## Records, newest first

- [In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently.](https://agentprime.io/advisories/CVE-2026-116870.md)
  `CVE-2026-116870` · CVE record: Octopus Deploy Octopus Server · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-1289
- [Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection](https://agentprime.io/advisories/CVE-2026-116197.md)
  `CVE-2026-116197` · CVE record: edgelesssys contrast · CVSS 2.1 Low · Not analysed yet · Published 25 Oct 2026 · Tags: CWE-1289
- [webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint](https://agentprime.io/advisories/CVE-2026-114348.md)
  `CVE-2026-114348` · CVE record: webpack-dev-server webpack-dev-server · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure, CWE-1289
- [Handlebars: JavaScript Injection via Own Property Check Bypass](https://agentprime.io/advisories/GHSA-p8wg-vrv2-v86f.md)
  `GHSA-p8wg-vrv2-v86f`, `CVE-2026-106445` · npm `handlebars`: affected `>=3.0.0, <4.7.10`, fixed in `4.7.10` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-184, CWE-1289
- [Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers](https://agentprime.io/advisories/GHSA-vmxc-h2x2-jmf3.md)
  `GHSA-vmxc-h2x2-jmf3`, `CVE-2026-107289`, `PYSEC-2026-4282`, `PYSEC-2026-4291` · PyPI `pydantic-ai` and 1 more: affected `>=1.56.0, <1.107.6 || >=2.0.0b1, <2.44.0`, fixed in `1.107.6`, `2.44.0` · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-1289
- [Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently](https://agentprime.io/advisories/CVE-2026-107288.md)
  `CVE-2026-107288` · CVE record: pydantic pydantic-ai and 1 more · CVSS 3.7 Low · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-1289
- [Octopus Deploy Octopus Server: In affected versions of Octopus Server…](https://agentprime.io/advisories/CVE-2026-102478.md)
  `CVE-2026-102478` · CVE record: Octopus Deploy Octopus Server · CVSS 8.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-1289
- [Zilliz Attu: The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to…](https://agentprime.io/advisories/CVE-2026-105048.md)
  `CVE-2026-105048` · CVE record: Zilliz Attu · CVSS 4.0 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-1289
- [JetBrains TeamCity: In JetBrains TeamCity before 2026.2, 2026.1.4…](https://agentprime.io/advisories/CVE-2026-100255.md)
  `CVE-2026-100255` · CVE record: JetBrains TeamCity · CVSS 8.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-1289
- [WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-97196.md)
  `CVE-2026-97196` · CVE record: Liquid Web / StellarWP GiveWP · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-1289
- [Trusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input](https://agentprime.io/advisories/CVE-2026-101015.md)
  `CVE-2026-101015` · CVE record: Trusted Domain Project OpenDMARC · CVSS 6.9 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20, CWE-1289
- [Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS](https://agentprime.io/advisories/CVE-2026-86831.md)
  `CVE-2026-86831` · CVE record: AWS aws-network-policy-agent and 1 more · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-1289
- [mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot](https://agentprime.io/advisories/GHSA-8x7x-5j8g-8hcx.md)
  `GHSA-8x7x-5j8g-8hcx`, `CVE-2026-88255`, `EEF-CVE-2026-88255` · Hex `mpp`: affected `>=0.2.0, <0.16.2`, fixed in `0.16.2` · CVSS 6.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-1289
- [Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent](https://agentprime.io/advisories/CVE-2026-89049.md)
  `CVE-2026-89049` · CVE record: AWS Amazon SSM Agent · CVSS 8.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-1289
- [Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)](https://agentprime.io/advisories/CVE-2026-76977.md)
  `CVE-2026-76977` · CVE record: SAP_SE SAPUI5(Frame Options Allowlist) · CVSS 4.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-1289
- [inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth](https://agentprime.io/advisories/CVE-2026-74994.md)
  `CVE-2026-74994` · CVE record: Erlang OTP · CVSS 6.0 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control, CWE-1289
- [URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep](https://agentprime.io/advisories/CVE-2026-19953.md)
  `CVE-2026-19953` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-1289
- [Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check](https://agentprime.io/advisories/CVE-2026-60074.md)
  `CVE-2026-60074` · CVE record · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-1289
- [Squid: Memory disclosure in FTP gateway](https://agentprime.io/advisories/CVE-2026-47729.md)
  `CVE-2026-47729` · CVE record: squid-cache squid · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Memory corruption, CWE-1289
- [Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries](https://agentprime.io/advisories/GHSA-6c87-g9pw-78fx.md)
  `GHSA-6c87-g9pw-78fx`, `CVE-2026-100837`, `GO-2026-5865` · Go `github.com/edgelesssys/contrast`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 6.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-1289
- [Aqara OAuth redirect_uri validation bypass](https://agentprime.io/advisories/CVE-2026-50090.md)
  `CVE-2026-50090` · CVE record: Aqara Cloud OAuth Authorization Endpoint · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-1289
- [Hono: IP Restriction bypasses static deny rules for non-canonical IPv6](https://agentprime.io/advisories/GHSA-xrhx-7g5j-rcj5.md)
  `GHSA-xrhx-7g5j-rcj5`, `CVE-2026-47674` · npm `hono`: affected `<4.12.21`, fixed in `4.12.21` · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-185, CWE-1289
- [Net::CIDR::Set versions through 0.20 for Perl did not validate network masks](https://agentprime.io/advisories/CVE-2026-49942.md)
  `CVE-2026-49942` · CVE record: RRWO Net::CIDR::Set · CVSS 7.3 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-1289
- [Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks](https://agentprime.io/advisories/CVE-2026-49940.md)
  `CVE-2026-49940` · CVE record: RRWO Net::CIDR::Set · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-1289
- [Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks](https://agentprime.io/advisories/GHSA-86qp-5c8j-p5mr.md)
  `GHSA-86qp-5c8j-p5mr`, `CVE-2026-48710`, `PYSEC-2026-161`, `X41-2026-002` · PyPI `starlette`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.70 · Not analysed yet · Published 4 Jun 2026 · Tags: HTTP request smuggling, CWE-1289
- [symfony/polyfill-intl-idn: xn-- labels with ASCII-only Punycode payloads are treated as equivalent to their decoded form](https://agentprime.io/advisories/GHSA-2xf4-cg6j-vhgq.md)
  `GHSA-2xf4-cg6j-vhgq`, `CVE-2026-46644`, `PKSA-df53-cqz9-c3zn`, `PKSA-dwsq-ppd2-mb1x` · Packagist `symfony/polyfill` and 1 more: affected `>=1.17.1, <1.38.1`, fixed in `1.38.1` · CVSS 6.9 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-1289
- [Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring](https://agentprime.io/advisories/GHSA-9rfg-v8g9-9367.md)
  `GHSA-9rfg-v8g9-9367`, `CVE-2026-42462` · npm `@fedify/fedify`: affected `<1.9.11 || >=1.10.0, <1.10.10 || >=2.0.0, <2.0.18 || >=2.1.0, <2.1.14 || >=2.2.0, <2.2.3`, fixed in `1.9.11`, `1.10.10`, `2.0.18`, `2.1.14`, `2.2.3` · CVSS 7.0 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS, CWE-180, CWE-436, CWE-1289
- [Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna](https://agentprime.io/advisories/GO-2026-5026.md)
  `GO-2026-5026`, `CVE-2026-39821` · Go `golang.org/x/net` and 1 more: affected `<0.55.0`, fixed in `0.55.0` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2026 · Tags: CWE-1289
- [Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass](https://agentprime.io/advisories/CVE-2026-45191.md)
  `CVE-2026-45191` · CVE record: STIGTSP Net::CIDR::Lite · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2026 · Tags: CWE-1289
- [Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass](https://agentprime.io/advisories/CVE-2026-45190.md)
  `CVE-2026-45190` · CVE record: STIGTSP Net::CIDR::Lite · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2026 · Tags: CWE-1289
- [webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed](https://agentprime.io/advisories/GHSA-22w3-693w-x895.md)
  `GHSA-22w3-693w-x895` · crates.io `webauthn-authenticator-rs` and 1 more: affected `<0.5.5 || >=0.6.0-dev, <0.6.1-dev`, fixed in `0.5.5`, `0.6.1-dev` · CVSS 4.0, no score published · Not analysed yet · Published 6 May 2026 · Tags: CWE-1289
- [DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode](https://agentprime.io/advisories/GHSA-crv5-9vww-q3g8.md)
  `GHSA-crv5-9vww-q3g8`, `CVE-2026-41239` · npm `dompurify`: affected `>=1.0.10, <3.4.0`, fixed in `3.4.0` · CVSS 6.8 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Cross-site scripting (XSS), CWE-1289
- [@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes](https://agentprime.io/advisories/GHSA-jhm7-29pj-4xvf.md)
  `GHSA-jhm7-29pj-4xvf`, `CVE-2026-41213` · npm `@node-oauth/oauth2-server`: affected `<5.3.0`, fixed in `5.3.0` · CVSS 5.9 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Authentication bypass, CWE-1289
- [Fastify has a Body Schema Validation Bypass via Leading Space in Content-Type Header](https://agentprime.io/advisories/GHSA-247c-9743-5963.md)
  `GHSA-247c-9743-5963`, `CVE-2025-32442`, `CVE-2026-33806`, `GHSA-mg2h-6x62-wpwc` · npm `fastify`: affected `>=5.3.2, <5.8.5`, fixed in `5.8.5` · CVSS 7.5 High · Not analysed yet · Published 15 Apr 2026 · Tags: CWE-1287, CWE-1289
- [Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF](https://agentprime.io/advisories/GHSA-3p68-rc4w-qgx5.md)
  `GHSA-3p68-rc4w-qgx5`, `CVE-2025-62718` · npm `axios`: affected `<0.31.0 || >=1.0.0, <1.15.0`, fixed in `0.31.0`, `1.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-441, CWE-1289
- [mercure has Topic Selector Cache Key Collision](https://agentprime.io/advisories/GHSA-hwr4-mq23-wcv5.md)
  `GHSA-hwr4-mq23-wcv5`, `CVE-2026-39972`, `GO-2026-5444` · Go `github.com/dunglas/mercure`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-1289
- [Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509](https://agentprime.io/advisories/GO-2026-4866.md)
  `GO-2026-4866`, `BIT-golang-2026-33810`, `CVE-2026-33810` · Go `stdlib`: affected `>=1.26.0-0, <1.26.2`, fixed in `1.26.2` · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-1289
- [xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception](https://agentprime.io/advisories/CVE-2026-34080.md)
  `CVE-2026-34080` · CVE record: flatpak xdg-dbus-proxy · CVSS 6.8 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-1289
- [fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)](https://agentprime.io/advisories/GHSA-rp9m-7r4c-75qg.md)
  `GHSA-rp9m-7r4c-75qg`, `CVE-2026-35039` · npm `fast-jwt`: affected `>=0.0.1, <6.2.0`, fixed in `6.2.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-345, CWE-706, CWE-1289
- [Incorrect startup configuration in ZCC](https://agentprime.io/advisories/CVE-2026-22569.md)
  `CVE-2026-22569` · CVE record: Zscaler Zscaler Client Connector · CVSS 5.4 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-1289
- [OpenFGA has an Authorization Bypass through cached keys](https://agentprime.io/advisories/GHSA-h6c8-cww8-35hf.md)
  `GHSA-h6c8-cww8-35hf`, `CVE-2026-33729`, `GO-2026-4857` · Go `github.com/openfga/openfga`: affected `<1.13.1`, fixed in `1.13.1` · CVSS 5.8 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-20, CWE-345, CWE-1289
- [Squid has issues in ICP message handling](https://agentprime.io/advisories/CVE-2026-33515.md)
  `CVE-2026-33515` · CVE record: squid-cache squid · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption, CWE-1289
- [Ory Oathkeeper has an authentication bypass by cache key confusion](https://agentprime.io/advisories/GHSA-4mq7-pvjg-xp2r.md)
  `GHSA-4mq7-pvjg-xp2r`, `CVE-2026-33496`, `GO-2026-4799` · Go `github.com/ory/oathkeeper`: affected `<0.40.10-0.20260320084801-198a2bc82a99`, fixed in `0.40.10-0.20260320084801-198a2bc82a99` · CVSS 8.1 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-305, CWE-1289
- [Devolutions PowerShell Universal: Improper input validation in the apps and endpoints configuration in PowerShell Universal…](https://agentprime.io/advisories/CVE-2026-3563.md)
  `CVE-2026-3563` · CVE record: Devolutions PowerShell Universal · CVSS 5.5 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-1289
- [Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions](https://agentprime.io/advisories/GHSA-jhp4-jvq3-w5xr.md)
  `GHSA-jhp4-jvq3-w5xr`, `CVE-2026-27610` · npm `parse-dashboard`: affected `>=7.3.0-alpha.42, <9.0.0-alpha.8`, fixed in `9.0.0-alpha.8` · CVSS 7.0 High · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-1289
- [Improper Validation of Unsafe Equivalence in Input in GitLab](https://agentprime.io/advisories/CVE-2026-1094.md)
  `CVE-2026-1094` · CVE record: GitLab GitLab · CVSS 4.6 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-1289
- [\`idna\` accepts Punycode labels that do not produce any non-ASCII when decoded](https://agentprime.io/advisories/GHSA-h97m-ww89-6jmq.md)
  `GHSA-h97m-ww89-6jmq`, `CVE-2024-12224`, `RUSTSEC-2024-0421` · crates.io `idna`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 5.1 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: CWE-697, CWE-1289
- [An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01.](https://agentprime.io/advisories/CVE-2024-45179.md)
  `CVE-2024-45179` · CVE record · CVSS 7.2 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-1289
- [AngularJS allows attackers to bypass common image source restrictions](https://agentprime.io/advisories/GHSA-m9gf-397r-hwpg.md)
  `GHSA-m9gf-397r-hwpg`, `CVE-2024-8372` · npm `angular`: affected `>=1.3.0-rc.4, <=1.8.3`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 9 Sept 2024 · Tags: CWE-1289
- [MySQL & free URL mode allows to hide existing notes in hedgedoc](https://agentprime.io/advisories/CVE-2024-45308.md)
  `CVE-2024-45308` · CVE record: hedgedoc hedgedoc · CVSS 6.5 Medium · Not analysed yet · Published 2 Sept 2024 · Tags: CWE-1289
- [1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.](https://agentprime.io/advisories/CVE-2024-42219.md)
  `CVE-2024-42219` · CVE record · CVSS 7.0 High · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-1289
- [1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms.](https://agentprime.io/advisories/CVE-2024-42218.md)
  `CVE-2024-42218` · CVE record · CVSS 6.3 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-1289
- [Puppet Firewall Module May Leave Unmanaged Rules](https://agentprime.io/advisories/CVE-2022-0675.md)
  `CVE-2022-0675` · CVE record: Puppet Firewall Module · CVSS 5.6 Medium · Not analysed yet · Published 2 Mar 2022 · Tags: CWE-1289

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1289>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1289/>. Everything for agents: <https://agentprime.io/llms.txt>.