# CWE-129.

Every Advisory and CVE whose sources give the weakness CWE-129, newest first.

## Records, newest first (an older page)

- [temporalio/sqlparser malformed MySQL version comments can cause a panic](https://agentprime.io/advisories/CVE-2026-16651.md)
  `CVE-2026-16651` · CVE record: Temporal Technologies, Inc. temporalio/sqlparser and 1 more · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-129
- [vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds toke...](https://agentprime.io/advisories/PYSEC-2026-4000.md)
  `PYSEC-2026-4000`, `CVE-2026-93989` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 2.3 Low · Not analysed yet · Published 19 Sept 2026 · Tags: CWE-129
- [vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton \_bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabul...](https://agentprime.io/advisories/PYSEC-2026-3999.md)
  `PYSEC-2026-3999`, `CVE-2026-93841` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-129
- [vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams.\_validate_allowed_token_ids(). Attackers can supply token IDs above th...](https://agentprime.io/advisories/PYSEC-2026-3998.md)
  `PYSEC-2026-3998`, `CVE-2026-93840` · PyPI `vllm`: affected `<0.29.0`, fixed in `0.29.0` · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-129
- [OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS](https://agentprime.io/advisories/CVE-2026-63635.md)
  `CVE-2026-63635` · CVE record: AcademySoftwareFoundation OpenImageIO · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption, CWE-129
- [OpenImageIO: PSD RawColor indexed image out-of-bounds read in \`interleave_row\`](https://agentprime.io/advisories/CVE-2026-63420.md)
  `CVE-2026-63420` · CVE record: AcademySoftwareFoundation OpenImageIO · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption, CWE-129
- [vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative...](https://agentprime.io/advisories/GHSA-25q3-v2hm-8vpf.md)
  `GHSA-25q3-v2hm-8vpf`, `CVE-2026-93592`, `PYSEC-2026-3997` · PyPI `vllm`: affected `<0.28.0`, fixed in `0.28.0` · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-129
- [HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-91101.md)
  `CVE-2026-91101` · CVE record: HP Inc. HP Linux Imaging and Printing Software (HPLIP) · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-129
- [Server panic via missing authority or Host headers in google.golang.org/grpc](https://agentprime.io/advisories/GHSA-2v4p-qf9q-27wj.md)
  `GHSA-2v4p-qf9q-27wj`, `CVE-2026-84445`, `GO-2026-6443` · Go `google.golang.org/grpc`: affected `<1.82.2 || >=1.83.0, <1.83.2 || >=1.84.0-dev, <1.84.0-dev.0.20260825144003-d5a41119e0e3 || >=1.85.0-dev, <1.85.0-dev.0.20260825072537-93e31b48545e`, fixed in `1.82.2`, `1.83.2`, `1.84.0-dev.0.20260825144003-d5a41119e0e3`, `1.85.0-dev.0.20260825072537-93e31b48545e` · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-129, CWE-248
- [Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization](https://agentprime.io/advisories/CVE-2026-88052.md)
  `CVE-2026-88052` · CVE record: tesseract-ocr tesseract · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption, CWE-129
- [Improper array index validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87500.md)
  `CVE-2026-87500` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-129
- [OOBR and OOBW in libpcap before 1.10.7](https://agentprime.io/advisories/CVE-2026-0799.md)
  `CVE-2026-0799` · CVE record: The Tcpdump Group libpcap · CVSS 8.7 High · Not analysed yet · Published 5 Sept 2026 · Tags: Memory corruption, CWE-129
- [PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance](https://agentprime.io/advisories/CVE-2026-57159.md)
  `CVE-2026-57159` · CVE record: pjsip pjproject · CVSS 8.4 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption, CWE-129
- [Out-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing bounds check](https://agentprime.io/advisories/CVE-2026-85084.md)
  `CVE-2026-85084` · CVE record: Samsung Open Source TizenFX · CVSS 6.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Memory corruption, CWE-129
- [Improper array index validation in AMD Radeon™ PRO V620 Graphics Products](https://agentprime.io/advisories/CVE-2023-31308.md)
  `CVE-2023-31308` · CVE record: AMD AMD Radeon™ PRO V620 Graphics Products · CVSS 3.3 Low · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-129
- [Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data](https://agentprime.io/advisories/CVE-2026-82327.md)
  `CVE-2026-82327` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-129
- [Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19318.md)
  `CVE-2026-19318` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-129
- [rclone Archive Backend SquashFS Parser Denial of Service](https://agentprime.io/advisories/CVE-2026-79775.md)
  `CVE-2026-79775` · CVE record: rclone rclone · CVSS 7.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-129
- [Zephyr virtio driver calls an arbitrary function pointer from an out-of-range used-ring descriptor id](https://agentprime.io/advisories/CVE-2026-13212.md)
  `CVE-2026-13212` · CVE record: zephyrproject zephyr · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-129
- [Power System Improper Validation](https://agentprime.io/advisories/CVE-2026-17097.md)
  `CVE-2026-17097` · CVE record: IBM PowerVM Hypervisor · CVSS 7.3 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-129
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16849.md)
  `CVE-2026-16849` · CVE record: IBM AIX and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-129
- [resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read](https://agentprime.io/advisories/GHSA-pr85-w493-9w3x.md)
  `GHSA-pr85-w493-9w3x`, `CVE-2026-55209`, `PYSEC-2026-3694` · PyPI `resdata`: affected `<6.2.9`, fixed in `6.2.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Memory corruption, CWE-129
- [Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing](https://agentprime.io/advisories/CVE-2026-65832.md)
  `CVE-2026-65832` · CVE record: deskflow deskflow · CVSS 8.2 High · Not analysed yet · Published 17 Aug 2026 · Tags: Memory corruption, CWE-129
- [Capstone M68K and RISCV \`cs_insn_name()\` invalid IDs can trigger out-of-bounds reads and process crashes](https://agentprime.io/advisories/CVE-2026-49282.md)
  `CVE-2026-49282` · CVE record: capstone-engine capstone · CVSS 5.1 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Memory corruption, CWE-129
- [rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block](https://agentprime.io/advisories/CVE-2026-53792.md)
  `CVE-2026-53792` · CVE record: RsyncProject rsync · CVSS 7.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: Memory corruption, CWE-129
- [TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index](https://agentprime.io/advisories/CVE-2026-70635.md)
  `CVE-2026-70635` · CVE record: timescale timescaledb · CVSS 7.1 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption, CWE-129
- [TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator](https://agentprime.io/advisories/CVE-2026-70634.md)
  `CVE-2026-70634` · CVE record: timescale timescaledb · CVSS 7.2 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption, CWE-129
- [Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service](https://agentprime.io/advisories/GHSA-ghrq-5wpp-hxx5.md)
  `GHSA-ghrq-5wpp-hxx5`, `CVE-2026-52856`, `GO-2026-6156` · Go `github.com/pterodactyl/wings`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Denial of service, CWE-20, CWE-129, CWE-248
- [frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow](https://agentprime.io/advisories/GHSA-26gq-p25f-99cp.md)
  `GHSA-26gq-p25f-99cp`, `CVE-2026-73564`, `GO-2026-6103` · Go `github.com/fatedier/frp`: affected `>=0.53.0, <0.70.1`, fixed in `0.70.1` · CVSS 8.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption, CWE-129
- [Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records](https://agentprime.io/advisories/GHSA-cqjc-rmpq-xprq.md)
  `GHSA-cqjc-rmpq-xprq`, `CVE-2026-73489` · crates.io `russh`: affected `<0.62.4`, fixed in `0.62.4` · CVSS 4.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-129
- [Helm Files.Lines Denial of Service via Empty Chart Files](https://agentprime.io/advisories/CVE-2026-63308.md)
  `CVE-2026-63308` · CVE record: helm helm · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-129
- [ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id](https://agentprime.io/advisories/CVE-2026-50144.md)
  `CVE-2026-50144` · CVE record: Tencent ncnn · CVSS 7.1 High · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-20, CWE-129
- [Improper array index validation in NVIDIA TensorRT](https://agentprime.io/advisories/CVE-2026-24238.md)
  `CVE-2026-24238` · CVE record: NVIDIA TensorRT · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-129
- [Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations ...](https://agentprime.io/advisories/PYSEC-2026-3450.md)
  `PYSEC-2026-3450`, `CVE-2026-15685` · PyPI `ollama`: affected , no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-129
- [GoBGP confederation validation panics on empty AS_PATH attribute](https://agentprime.io/advisories/GHSA-frrj-87jh-2772.md)
  `GHSA-frrj-87jh-2772`, `CVE-2026-49838`, `GO-2026-5954` · Go `github.com/osrg/gobgp/v4`: affected `<4.7.0`, fixed in `4.7.0` · CVSS 5.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-129
- [Foxit PDF Editor/Reader Cloud Appearance Buffer Overflow Vulnerability](https://agentprime.io/advisories/CVE-2026-57251.md)
  `CVE-2026-57251` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57272.md)
  `CVE-2026-57272` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57271.md)
  `CVE-2026-57271` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57270.md)
  `CVE-2026-57270` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57269.md)
  `CVE-2026-57269` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57268.md)
  `CVE-2026-57268` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57267.md)
  `CVE-2026-57267` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57266.md)
  `CVE-2026-57266` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57265.md)
  `CVE-2026-57265` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-57264.md)
  `CVE-2026-57264` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-13132.md)
  `CVE-2026-13132` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability](https://agentprime.io/advisories/CVE-2026-13131.md)
  `CVE-2026-13131` · CVE record: GeoVision Inc. GeoWebPlayer · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-129
- [Constrata's coordinator transit engine \`ciphertextContainer.UnmarshalJSON\` panics on attacker-controlled short ciphertexts](https://agentprime.io/advisories/GHSA-3ccm-4qq2-5wrp.md)
  `GHSA-3ccm-4qq2-5wrp`, `CVE-2026-100836`, `GO-2026-5864` · Go `github.com/edgelesssys/contrast`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-129
- [DVP80ES300T - Improper Validation of Array Index Vulnerability](https://agentprime.io/advisories/CVE-2026-14193.md)
  `CVE-2026-14193` · CVE record: deltaww DVP80ES300T · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-129
- [WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader](https://agentprime.io/advisories/CVE-2026-14191.md)
  `CVE-2026-14191` · CVE record: RARLAB WinRAR and 3 more · CVSS 7.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption, CWE-129
- [Improper array index validation in vtk](https://agentprime.io/advisories/CVE-2026-22879.md)
  `CVE-2026-22879` · CVE record: vtk vtk · CVSS 8.1 High · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-129
- [libais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID](https://agentprime.io/advisories/CVE-2026-56770.md)
  `CVE-2026-56770` · CVE record: schwehr libais · CVSS 8.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-129
- [Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler](https://agentprime.io/advisories/CVE-2026-56111.md)
  `CVE-2026-56111` · CVE record: MarlinFirmware Marlin · CVSS 8.3 High · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-129
- [NGINX Gateway Fabric vulnerability](https://agentprime.io/advisories/CVE-2026-32682.md)
  `CVE-2026-32682` · CVE record: F5 NGINX Gateway Fabric · CVSS 7.1 High · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-129
- [Improper array index validation in NVIDIA DALI](https://agentprime.io/advisories/CVE-2026-24181.md)
  `CVE-2026-24181` · CVE record: NVIDIA DALI · CVSS 7.3 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-129
- [Improper Validation of Array Index in Secure Processor](https://agentprime.io/advisories/CVE-2026-25276.md)
  `CVE-2026-25276` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-129
- [MapServer: NULL pointer dereference in SLD \`\<ElseFilter>\` rule parsing reachable via WMS \`SLD_BODY\`](https://agentprime.io/advisories/CVE-2026-45104.md)
  `CVE-2026-45104` · CVE record: MapServer MapServer · CVSS 7.5 High · Not analysed yet · Published 27 May 2026 · Tags: Memory corruption, CWE-129
- [Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent](https://agentprime.io/advisories/GHSA-9m57-25v3-79x9.md)
  `GHSA-9m57-25v3-79x9`, `CVE-2026-46598`, `GO-2026-5033` · Go `golang.org/x/crypto`: affected `<0.52.0`, fixed in `0.52.0` · CVSS 5.3 Medium · Not analysed yet · Published 22 May 2026 · Tags: CWE-129
- [Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string](https://agentprime.io/advisories/GHSA-m5j3-4634-c2vq.md)
  `GHSA-m5j3-4634-c2vq`, `CVE-2026-46377`, `GO-2026-5491` · Go `github.com/tomwright/dasel/v3`: affected `>=3.0.0, <=3.10.0`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-129
- [Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service](https://agentprime.io/advisories/GHSA-7xpr-hc2w-34m9.md)
  `GHSA-7xpr-hc2w-34m9`, `CVE-2026-45799` · Maven `com.squareup.wire:wire-runtime` and 1 more: affected `<6.3.0 || >=7.0.0-alpha01, <7.0.0-alpha03`, fixed in `6.3.0`, `7.0.0-alpha03` · CVSS 7.5 High · Not analysed yet · Published 19 May 2026 · Tags: CWE-129

Newest: <https://agentprime.io/advisories/tag/cwe-129.md>
Older: <https://agentprime.io/advisories/tag/cwe-129.md?cursor=WyIyMDI2LTA1LTE5VDE5OjU0OjUwLjAwMDAwMFoiLCJHSFNBLTd4cHItaGMydy0zNG05Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-129&cursor=WyIyMDI2LTA5LTIxVDExOjM1OjQwLjg5NjAwMFoiLCJDVkUtMjAyNi02NTY1MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-129/?cursor=WyIyMDI2LTA5LTIxVDExOjM1OjQwLjg5NjAwMFoiLCJDVkUtMjAyNi02NTY1MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.