agentprime: CWE-1325

CVE-2026-109619: RCE via stale global state

Wed, 21 Oct 2026 13:54:43 GMT

CVSS 9.2 (Critical). Critical: In CISA’s KEV catalogue since 26 Oct 2026: it is known to be exploited. CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109618: RCE via OOM corruption

Wed, 21 Oct 2026 13:48:34 GMT

MessagePack: Nested arrays can blow past buffer length limits

Thu, 15 Oct 2026 18:35:46 GMT

MessagePack <2.5.303 || >=3.0.0, <3.1.9, fixed in 2.5.303, 3.1.9. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 20:11:58 GMT

Microsoft.AspNetCore.SignalR.Protocols.MessagePack >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-96421: Improperly Controlled Sequential Memory Allocation in Wireshark

Tue, 29 Sep 2026 09:31:03 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Mermaid XY Charts are vulnerable to an infinite loop DoS

Thu, 06 Aug 2026 19:49:48 GMT

mermaid >=10.6.0, <10.9.8 || >=11.0.0-alpha.1, <11.16.1, fixed in 10.9.8, 11.16.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-18772: Samsung Open Source rlottie: Improperly controlled sequential memory allocation vulnerability in Samsung Open Source…

Tue, 04 Aug 2026 08:22:48 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

veraPDF Parser DoS via PostScript Type 1 Font Programs

Wed, 29 Jul 2026 15:19:04 GMT

org.verapdf:parser <1.30.2 || >=1.31.1, <1.31.23, fixed in 1.30.2, 1.31.23. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

veraPDF Parser DoS via PostScript CMap Streams

Wed, 29 Jul 2026 15:17:32 GMT

org.verapdf:parser <1.30.2 || >=1.31.1, <1.31.23, fixed in 1.30.2, 1.31.23. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-13056: A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM

Wed, 22 Jul 2026 19:22:27 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Guzzle: Unbounded response cookies risk denial of service

Mon, 20 Jul 2026 23:27:02 GMT

guzzlehttp/guzzle <7.15.1, fixed in 7.15.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

Tue, 09 Jun 2026 16:03:23 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8199: Post-auth memory exhaustion via bitwise match expressions

Wed, 13 May 2026 00:05:22 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6535: Improperly Controlled Sequential Memory Allocation in Wireshark

Thu, 30 Apr 2026 05:36:49 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6533: Improperly Controlled Sequential Memory Allocation in Wireshark

Thu, 30 Apr 2026 05:36:39 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6869: Improperly Controlled Sequential Memory Allocation in Wireshark

Thu, 30 Apr 2026 05:33:39 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6867: Improperly Controlled Sequential Memory Allocation in Wireshark

Thu, 30 Apr 2026 05:33:34 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)

Thu, 16 Apr 2026 22:50:37 GMT

Meridian.Mapping >=2.0.0, <2.1.1, fixed in 2.1.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-3201: Improperly Controlled Sequential Memory Allocation in Wireshark

Wed, 25 Feb 2026 14:35:50 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

weixin4j has Improperly Controlled Sequential Memory Allocation

Tue, 27 Jan 2026 09:30:30 GMT

com.foxinmy:weixin4j-base <=1.10.2, no fixed version yet. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-13945: Improperly Controlled Sequential Memory Allocation in Wireshark

Wed, 03 Dec 2025 08:04:49 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

SmallRye Fault Tolerance out-of-memory (OOM) issue

Wed, 12 Mar 2025 15:32:06 GMT

io.smallrye:smallrye-fault-tolerance-core >=6.3.0, <6.4.2 || >=6.5.0, <6.9.0, fixed in 6.4.2, 6.9.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-52891: Siemens SIMATIC Energy Manager Basic: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions <…

Tue, 09 Jul 2024 12:04:42 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-27796: The issue was addressed with improved checks.

Mon, 13 May 2024 23:00:54 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-27804: The issue was addressed with improved memory handling.

Mon, 13 May 2024 23:00:48 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2511: Unbounded memory growth with session handling in TLSv1.3

Mon, 08 Apr 2024 13:51:12 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-3341: A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

Wed, 20 Sep 2023 12:32:03 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-28968: Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

Mon, 17 Apr 2023 00:00:00 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Memory exhaustion in routinator

Thu, 11 Nov 2021 00:55:08 GMT

routinator >=0.9.0, <0.10.2, fixed in 0.10.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.