# CWE-129.

Every Advisory and CVE whose sources give the weakness CWE-129, newest first.

## Records, newest first (an older page)

- [ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.](https://agentprime.io/advisories/GHSA-pfvh-m9xv-8966.md)
  `GHSA-pfvh-m9xv-8966`, `CVE-2026-45624` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.1 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-129
- [ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define](https://agentprime.io/advisories/GHSA-vhrh-72hq-w8m7.md)
  `GHSA-vhrh-72hq-w8m7`, `CVE-2026-45359` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.7 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-129
- [Improper array index validation in AMD Radeon™ RX 6000 Series Graphics Products and others](https://agentprime.io/advisories/CVE-2023-31309.md)
  `CVE-2023-31309` · CVE record: AMD AMD Radeon™ RX 6000 Series Graphics Products and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 15 May 2026 · Tags: CWE-129
- [gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers](https://agentprime.io/advisories/GHSA-7c37-gx6w-8vc5.md)
  `GHSA-7c37-gx6w-8vc5`, `CVE-2026-44310`, `GO-2026-5212` · Go `github.com/sigstore/gitsign`: affected `>=0.4.0, <0.15.0`, fixed in `0.15.0` · CVSS 5.4 Medium · Not analysed yet · Published 8 May 2026 · Tags: CWE-129, CWE-390
- [wifi: iwlwifi: fix 22000 series SMEM parsing](https://agentprime.io/advisories/CVE-2026-43172.md)
  `CVE-2026-43172` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-129
- [wifi: brcmfmac: validate bsscfg indices in IF events](https://agentprime.io/advisories/CVE-2026-43110.md)
  `CVE-2026-43110` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-129
- [vLLM Vulnerable to Remote DoS via Special-Token Placeholders](https://agentprime.io/advisories/GHSA-hpv8-x276-m59f.md)
  `GHSA-hpv8-x276-m59f`, `CVE-2026-44222`, `PYSEC-2026-3409` · PyPI `vllm`: affected `>=0.6.1, <0.20.0`, fixed in `0.20.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-129
- [Incus Vulnerable to Panic via Snapshot Bounds Check](https://agentprime.io/advisories/GHSA-4m88-wxj4-9qj6.md)
  `GHSA-4m88-wxj4-9qj6`, `CVE-2026-40251`, `GO-2026-5127` · Go `github.com/lxc/incus/v6/cmd/incusd`: affected `<7.0.0`, fixed in `7.0.0` · CVSS 7.1 High · Not analysed yet · Published 4 May 2026 · Tags: Memory corruption, CWE-129
- [GoBGP has Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE](https://agentprime.io/advisories/GHSA-8rxh-r2p6-7f2q.md)
  `GHSA-8rxh-r2p6-7f2q`, `CVE-2026-41643`, `GO-2026-5266` · Go `github.com/osrg/gobgp/v4`: affected `<4.3.0`, fixed in `4.3.0` · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2026 · Tags: CWE-129
- [Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller](https://agentprime.io/advisories/GHSA-5jv8-h7qh-rf5p.md)
  `GHSA-5jv8-h7qh-rf5p`, `BIT-argo-workflows-2026-40886`, `CVE-2026-40886`, `GO-2026-5148` · Go `github.com/argoproj/argo-workflows/v4` and 1 more: affected `>=4.0.0, <4.0.5`, fixed in `4.0.5` · CVSS 7.7 High · Not analysed yet · Published 23 Apr 2026 · Tags: CWE-129, CWE-1285
- [Improper array index validation in Samsung Open Source ONE](https://agentprime.io/advisories/CVE-2026-6840.md)
  `CVE-2026-6840` · CVE record: Samsung Open Source ONE · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-129
- [Step CA affected by an index out of bounds panic in TPM attestation EKU validation](https://agentprime.io/advisories/GHSA-9qq8-cgcv-qmc9.md)
  `GHSA-9qq8-cgcv-qmc9`, `CVE-2026-40097`, `GO-2026-5297` · Go `github.com/smallstep/certificates`: affected `>=0.24.0, <0.30.0`, fixed in `0.30.0` · CVSS 3.7 Low · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-129
- [Panic when transcoding misaligned component model UTF-16 strings](https://agentprime.io/advisories/GHSA-jxhv-7h78-9775.md)
  `GHSA-jxhv-7h78-9775`, `CVE-2026-34942`, `RUSTSEC-2026-0092` · crates.io `wasmtime`: affected `>=0.0.0-0, <24.0.7 || >=25.0.0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1`, fixed in `24.0.7`, `36.0.7`, `42.0.2`, `43.0.1` · CVSS 5.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-129
- [Improper array index validation in LibRaw](https://agentprime.io/advisories/CVE-2026-21413.md)
  `CVE-2026-21413` · CVE record: LibRaw LibRaw · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2026 · Tags: Memory corruption, CWE-129
- [EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory](https://agentprime.io/advisories/GHSA-32wq-ppwg-3w4m.md)
  `GHSA-32wq-ppwg-3w4m` · NuGet `EnhancedLinq.Async`: affected `>=1.0.0-beta.1, <1.0.0-beta.3`, fixed in `1.0.0-beta.3` · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-129, CWE-1395
- [go-git missing validation decoding Index v4 files leads to panic](https://agentprime.io/advisories/GHSA-gm2x-2g9h-ccm8.md)
  `GHSA-gm2x-2g9h-ccm8`, `CVE-2026-33762`, `GO-2026-4909` · Go `github.com/go-git/go-git/v5`: affected `<5.17.1`, fixed in `5.17.1` · CVSS 2.8 Low · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-129
- [Packetbeat does not properly validate an array index in multiple protocol parser components](https://agentprime.io/advisories/GHSA-27qj-9gvp-8rh9.md)
  `GHSA-27qj-9gvp-8rh9`, `CVE-2026-26933`, `GO-2026-4789` · Go `github.com/elastic/beats/v7`: affected `<7.0.0-alpha2.0.20260126223743-dec1b31111ec`, fixed in `7.0.0-alpha2.0.20260126223743-dec1b31111ec` · CVSS 5.7 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-129
- [Ella Core panics on invalid PDU Session IDs in NGAP messages](https://agentprime.io/advisories/GHSA-q669-4gmv-g8mf.md)
  `GHSA-q669-4gmv-g8mf`, `CVE-2026-33281`, `GO-2026-4783` · Go `github.com/ellanetworks/core`: affected `<1.6.0`, fixed in `1.6.0` · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-129
- [Duplicate Advisory: pgproto3: Negative field length panics in DataRow.Decode](https://agentprime.io/advisories/GHSA-x6gf-mpr2-68h6.md)
  `GHSA-x6gf-mpr2-68h6`, `CVE-2026-4427` · Go `github.com/jackc/pgproto3/v2`: affected `<=2.3.3`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-129
- [gosaml2 CBC Padding Panic — Unauthenticated Process Crash](https://agentprime.io/advisories/GHSA-hwqm-qvj9-4jr2.md)
  `GHSA-hwqm-qvj9-4jr2`, `GO-2026-4760` · Go `github.com/russellhaering/gosaml2`: affected `<0.11.0`, fixed in `0.11.0` · CVSS 4.0, no score published · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-129
- [HTSlib CRAM reader has out-of-bounds read due to improper validation of input](https://agentprime.io/advisories/CVE-2026-31967.md)
  `CVE-2026-31967` · CVE record: samtools htslib · CVSS 6.9 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129
- [HTSlib CRAM reader has out-of-bounds read due to improper validation of input](https://agentprime.io/advisories/CVE-2026-31966.md)
  `CVE-2026-31966` · CVE record: samtools htslib · CVSS 6.9 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129
- [HTSlib CRAM reader has out-of-bounds reads due to improper validation of input](https://agentprime.io/advisories/CVE-2026-31965.md)
  `CVE-2026-31965` · CVE record: samtools htslib · CVSS 6.9 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129
- [HTSlib CRAM reader has heap buffer overflow due to improper validation of input](https://agentprime.io/advisories/CVE-2026-31963.md)
  `CVE-2026-31963` · CVE record: samtools htslib · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129
- [HTSlib CRAM reader has heap buffer overflow due to improper validation of input](https://agentprime.io/advisories/CVE-2026-31962.md)
  `CVE-2026-31962` · CVE record: samtools htslib · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129
- [Out-of-Bounds Slice Access in free5GC CHF Leading to DoS](https://agentprime.io/advisories/GHSA-6g43-577r-wf4x.md)
  `GHSA-6g43-577r-wf4x`, `CVE-2026-32937`, `GO-2026-4750` · Go `github.com/free5gc/chf`: affected `<1.2.2`, fixed in `1.2.2` · CVSS 7.1 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-129
- [Denial of service in github.com/jackc/pgproto3/v2](https://agentprime.io/advisories/GHSA-jqcq-xjh3-6g23.md)
  `GHSA-jqcq-xjh3-6g23`, `CVE-2026-32286`, `GO-2026-4518` · Go `github.com/jackc/pgproto3/v2`: affected `>=2.0.0, <=2.3.3`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-129, CWE-1285
- [github.com/buger/jsonparser has a denial of service vulnerability](https://agentprime.io/advisories/GHSA-6g7g-w4f8-9c9x.md)
  `GHSA-6g7g-w4f8-9c9x`, `CVE-2026-32285`, `GO-2026-4514` · Go `github.com/buger/jsonparser`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129, CWE-1285
- [Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun](https://agentprime.io/advisories/GHSA-cv4x-93xx-wgfj.md)
  `GHSA-cv4x-93xx-wgfj`, `CVE-2026-33022`, `GO-2026-4730` · Go `github.com/tektoncd/pipeline`: affected `>=0.60.0, <1.0.1 || >=1.1.0, <1.3.3 || >=1.4.0, <1.6.1 || >=1.7.0, <1.9.2 || >=1.10.0, <1.10.2`, fixed in `1.0.1`, `1.3.3`, `1.6.1`, `1.9.2`, `1.10.2` · CVSS 6.5 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Denial of service, CWE-129
- [idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-8fh9-c4jq-94h4.md)
  `GHSA-8fh9-c4jq-94h4` · NuGet `idunno.AtProto` and 2 more: affected `<1.7.0`, fixed in `1.7.0` · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-129
- [GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3083.md)
  `CVE-2026-3083` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption, CWE-129
- [iccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence()](https://agentprime.io/advisories/CVE-2026-30984.md)
  `CVE-2026-30984` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.1 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption, CWE-129
- [iccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert()](https://agentprime.io/advisories/CVE-2026-30982.md)
  `CVE-2026-30982` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.1 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption, CWE-129
- [Improper Validation of Array Index in Packetbeat Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-26932.md)
  `CVE-2026-26932` · CVE record: Elastic Packetbeat · CVSS 5.7 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: CWE-129
- [Fiber has a Denial of Service Vulnerability via Route Parameter Overflow](https://agentprime.io/advisories/GHSA-mrq8-rjmw-wpq3.md)
  `GHSA-mrq8-rjmw-wpq3`, `CVE-2026-25882`, `GO-2026-4543` · Go `github.com/gofiber/fiber/v2` and 1 more: affected `<2.52.12`, fixed in `2.52.12` · CVSS 5.5 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-129
- [free5GC has Array Index Out of Bounds in AMF Leading to Denial of Service](https://agentprime.io/advisories/CVE-2025-69248.md)
  `CVE-2025-69248` · CVE record: free5gc amf · CVSS 6.6 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: CWE-129
- [Improper array index validation in AMD Radeon™ PRO VII and others](https://agentprime.io/advisories/CVE-2023-20601.md)
  `CVE-2023-20601` · CVE record: AMD AMD Radeon™ PRO VII and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-129
- [PostgreSQL missing validation of multibyte character length executes arbitrary code](https://agentprime.io/advisories/CVE-2026-2006.md)
  `CVE-2026-2006` · CVE record: PostgreSQL · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-129, CWE-1285
- [iccDEV vulnerable to OOB in CIccXform3DLut::Apply()](https://agentprime.io/advisories/CVE-2026-25585.md)
  `CVE-2026-25585` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.8 High · Not analysed yet · Published 4 Feb 2026 · Tags: Memory corruption, CWE-129
- [cert-manager-controller DoS via Specially Crafted DNS Response](https://agentprime.io/advisories/GHSA-gx3x-vq4p-mhhv.md)
  `GHSA-gx3x-vq4p-mhhv`, `BIT-cert-manager-2026-25518`, `CVE-2026-25518`, `GO-2026-4399` · Go `github.com/cert-manager/cert-manager`: affected `>=1.18.0, <1.18.5 || >=1.19.0, <1.19.3`, fixed in `1.18.5`, `1.19.3` · CVSS 5.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-129, CWE-704
- [alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow](https://agentprime.io/advisories/CVE-2026-25068.md)
  `CVE-2026-25068` · CVE record: ALSA Project alsa-lib · CVSS 4.6 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-129
- [FreeRDP has a heap-buffer-overflow in urb_select_configuration](https://agentprime.io/advisories/CVE-2026-22859.md)
  `CVE-2026-22859` · CVE record: FreeRDP FreeRDP · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption, CWE-129
- [Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers](https://agentprime.io/advisories/CVE-2026-0529.md)
  `CVE-2026-0529` · CVE record: Elastic Packetbeat · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-129
- [Metricbeat affected by multiple denial of service vulnerabilities](https://agentprime.io/advisories/GHSA-w2gr-585j-r428.md)
  `GHSA-w2gr-585j-r428`, `CVE-2026-0528`, `GO-2026-4360` · Go `github.com/elastic/beats/v7`: affected `<7.0.0-alpha2.0.20251217054608-6e42552a23ce || >=8.0.0, <8.19.10 || >=9.0.0, <9.1.10 || >=9.2.0, <9.2.4`, fixed in `7.0.0-alpha2.0.20251217054608-6e42552a23ce`, `8.19.10`, `9.1.10`, `9.2.4` · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-129
- [Improper Validation of Array Index in Automotive Linux OS](https://agentprime.io/advisories/CVE-2025-47393.md)
  `CVE-2025-47393` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-129
- [FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-15271.md)
  `CVE-2025-15271` · CVE record: FontForge FontForge · CVSS 8.8 High · Not analysed yet · Published 31 Dec 2025 · Tags: CWE-129
- [FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-15270.md)
  `CVE-2025-15270` · CVE record: FontForge FontForge · CVSS 8.8 High · Not analysed yet · Published 31 Dec 2025 · Tags: CWE-129
- [The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests.](https://agentprime.io/advisories/CVE-2025-65562.md)
  `CVE-2025-65562` · CVE record · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2025 · Tags: CWE-129
- [Taiko Alethia Pacaya inbox verification pointer corruption](https://agentprime.io/advisories/CVE-2025-66559.md)
  `CVE-2025-66559` · CVE record: taikoxyz taiko-mono · CVSS 8.0 High · Not analysed yet · Published 4 Dec 2025 · Tags: CWE-129
- [OpenPrinting CUPS vulnerable to stack based out-of-bound write](https://agentprime.io/advisories/CVE-2025-61915.md)
  `CVE-2025-61915` · CVE record: OpenPrinting cups · CVSS 6.0 Medium · Not analysed yet · Published 29 Nov 2025 · Tags: Memory corruption, CWE-129
- [ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range](https://agentprime.io/advisories/CVE-2025-0657.md)
  `CVE-2025-0657` · CVE record: Automated Logic WebCtrl and 2 more · CVSS 8.8 High · Not analysed yet · Published 27 Nov 2025 · Tags: CWE-129, CWE-248
- [Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_data…](https://agentprime.io/advisories/CVE-2025-65499.md)
  `CVE-2025-65499` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 24 Nov 2025 · Tags: CWE-129
- [vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs](https://agentprime.io/advisories/GHSA-pmqf-x6x8-p7qw.md)
  `GHSA-pmqf-x6x8-p7qw`, `CVE-2025-62372`, `PYSEC-2026-2019` · PyPI `vllm`: affected `>=0.5.5, <0.11.1`, fixed in `0.11.1` · CVSS 8.3 High · Not analysed yet · Published 20 Nov 2025 · Tags: CWE-129
- [Rsync: Out of bounds array access via negative index](https://agentprime.io/advisories/CVE-2025-10158.md)
  `CVE-2025-10158` · CVE record: rsync rsync · CVSS 4.3 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-129
- [Improper Validation of Array Index in Automotive Software platform based on QNX](https://agentprime.io/advisories/CVE-2025-47361.md)
  `CVE-2025-47361` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-129
- [Improper Validation of Array Index in Audio](https://agentprime.io/advisories/CVE-2025-47352.md)
  `CVE-2025-47352` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-129
- [Improper Validation of Array Index in Multi-Mode Call Processor](https://agentprime.io/advisories/CVE-2025-27034.md)
  `CVE-2025-27034` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-129
- [Improper array index validation in NVIDIA CUDA Toolkit](https://agentprime.io/advisories/CVE-2025-23338.md)
  `CVE-2025-23338` · CVE record: NVIDIA NVIDIA CUDA Toolkit · CVSS 3.3 Low · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-129
- [ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer](https://agentprime.io/advisories/CVE-2023-53395.md)
  `CVE-2023-53395` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Sept 2025 · Tags: CWE-129
- [net/mlx5: Collect command failures data only for known commands](https://agentprime.io/advisories/CVE-2023-53340.md)
  `CVE-2023-53340` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-129

Newest: <https://agentprime.io/advisories/tag/cwe-129.md>
Older: <https://agentprime.io/advisories/tag/cwe-129.md?cursor=WyIyMDI1LTA5LTE3VDE0OjU2OjMzLjkxNzAwMFoiLCJDVkUtMjAyMy01MzM0MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-129&cursor=WyIyMDI2LTA1LTE5VDE5OjU0OjUwLjAwMDAwMFoiLCJHSFNBLTd4cHItaGMydy0zNG05Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-129/?cursor=WyIyMDI2LTA1LTE5VDE5OjU0OjUwLjAwMDAwMFoiLCJHSFNBLTd4cHItaGMydy0zNG05Il0>. Everything for agents: <https://agentprime.io/llms.txt>.