# CWE-15.

Every Advisory and CVE whose sources give the weakness CWE-15, newest first.

## Records, newest first

- [IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability](https://agentprime.io/advisories/CVE-2026-13292.md)
  `CVE-2026-13292` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-15
- [Docker Sandboxes host Git executes repository-controlled programs](https://agentprime.io/advisories/CVE-2026-121614.md)
  `CVE-2026-121614` · CVE record: Docker Docker Sandboxes · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-15
- [AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config](https://agentprime.io/advisories/CVE-2026-121427.md)
  `CVE-2026-121427` · CVE record: AzuraCast AzuraCast · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-15
- [Inadequate Steps to Confirm Vulnerability in QuRouter](https://agentprime.io/advisories/CVE-2025-68403.md)
  `CVE-2025-68403` · CVE record: QNAP Systems Inc. QuRouter · CVSS 4.6 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-15
- [n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation](https://agentprime.io/advisories/CVE-2026-110845.md)
  `CVE-2026-110845` · CVE record: n8n-io n8n · CVSS 7.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-15
- [Microsoft PowerToys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96188.md)
  `CVE-2026-96188` · CVE record: Microsoft Microsoft PowerToys · CVSS 7.3 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-15
- [Windows Setup Files Cleanup Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-73027.md)
  `CVE-2026-73027` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-15
- [Windows Update Stack Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-96218.md)
  `CVE-2026-96218` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-15
- [MariaDB: environment injection via wsrep bootstrap in the mariadb.service file](https://agentprime.io/advisories/CVE-2026-107818.md)
  `CVE-2026-107818` · CVE record: MariaDB server · CVSS 8.4 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-15
- [Origin validation error in Eclipse Ditto Ditto Explorer UI](https://agentprime.io/advisories/CVE-2026-107503.md)
  `CVE-2026-107503` · CVE record: Eclipse Ditto Ditto Explorer UI · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Hard-coded credentials, CWE-15, CWE-346
- [Brocade Fabric OS: A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI)…](https://agentprime.io/advisories/CVE-2026-94577.md)
  `CVE-2026-94577` · CVE record: Brocade Fabric OS · CVSS 7.3 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-15
- [Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig](https://agentprime.io/advisories/CVE-2026-105294.md)
  `CVE-2026-105294` · CVE record: Legcord Legcord · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-15
- [MergeAccount PHP object injection via session-key substitution](https://agentprime.io/advisories/CVE-2026-103442.md)
  `CVE-2026-103442` · CVE record: The Wikimedia Foundation MediaWiki CentralAuth extension · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-15
- [NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI](https://agentprime.io/advisories/CVE-2026-54918.md)
  `CVE-2026-54918` · CVE record: netbox-community devicetype-library · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-15, CWE-829
- [An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands.](https://agentprime.io/advisories/CVE-2026-87987.md)
  `CVE-2026-87987` · CVE record: mistralai mistral-vibe · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-15
- [Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop](https://agentprime.io/advisories/CVE-2026-85217.md)
  `CVE-2026-85217` · CVE record: Autodesk Fusion · CVSS 8.6 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-15
- [Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME](https://agentprime.io/advisories/CVE-2026-13745.md)
  `CVE-2026-13745` · CVE record: Google Cloud Gemini CLI · CVSS 7.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-15, CWE-829
- [OpenAI Codex CLI: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…](https://agentprime.io/advisories/CVE-2026-19592.md)
  `CVE-2026-19592` · CVE record: OpenAI Codex CLI and 2 more · CVSS 7.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-15
- [OpenAI Codex Desktop: OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and…](https://agentprime.io/advisories/CVE-2026-19593.md)
  `CVE-2026-19593` · CVE record: OpenAI Codex Desktop and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-15
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-16708.md)
  `CVE-2026-16708` · CVE record: IBM Db2 Mirror for i · CVSS 8.3 High · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-15
- [Eclipse Foundation Eclipse Theia: In Eclipse Theia versions up to and including 1.69.0…](https://agentprime.io/advisories/CVE-2026-19884.md)
  `CVE-2026-19884` · CVE record: Eclipse Foundation Eclipse Theia · CVSS 8.4 High · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-15, CWE-829
- [FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup](https://agentprime.io/advisories/CVE-2026-73661.md)
  `CVE-2026-73661` · CVE record: FreePBX framework · CVSS 8.6 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-15
- [HCL iControl is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-56567.md)
  `CVE-2026-56567` · CVE record: HCL Software HCL iControl · CVSS 5.1 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-15
- [Dash: Users can write to config despire permissions (OIDC tested)](https://agentprime.io/advisories/CVE-2026-46485.md)
  `CVE-2026-46485` · CVE record: lissy93 dashy · CVSS 8.2 High · Not analysed yet · Published 15 Jul 2026 · Tags: Broken access control, Authentication bypass, CWE-15, CWE-602
- [Security misconfiguration in SAP CRM (WebClient UI)](https://agentprime.io/advisories/CVE-2026-44768.md)
  `CVE-2026-44768` · CVE record: SAP_SE SAP CRM (WebClient UI) · CVSS 4.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-15
- [ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys](https://agentprime.io/advisories/GHSA-jv2h-4p9v-wf5w.md)
  `GHSA-jv2h-4p9v-wf5w`, `CVE-2026-66065` · PyPI `ouroboros-ai`: affected `<0.42.1`, fixed in `0.42.1` · CVSS 8.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Code injection, CWE-15
- [Certain NETGEAR devices allow administrators to tamper with system](https://agentprime.io/advisories/CVE-2026-0418.md)
  `CVE-2026-0418` · CVE record: NETGEAR CBR750 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-15
- [Authenticated Remote Code Execution via File Overwrite](https://agentprime.io/advisories/CVE-2026-46399.md)
  `CVE-2026-46399` · CVE record: haxtheweb haxcms-nodejs and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Path traversal, Command injection, CWE-15
- [Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection](https://agentprime.io/advisories/CVE-2026-1784.md)
  `CVE-2026-1784` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-15
- [Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet](https://agentprime.io/advisories/CVE-2019-25716.md)
  `CVE-2019-25716` · CVE record: Dräger Infinity Delta and 2 more · CVSS 7.1 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-15
- [Apache CXF: Untrusted JMS configuration can lead to RCE](https://agentprime.io/advisories/GHSA-2hvc-5c6v-f533.md)
  `GHSA-2hvc-5c6v-f533`, `CVE-2026-44417` · Maven `org.apache.cxf:cxf-rt-transports-jms`: affected `>=4.2.0, <4.2.1 || >=4.1.0, <4.1.6 || <3.6.11`, fixed in `4.2.1`, `4.1.6`, `3.6.11` · CVSS 7.5 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-15, CWE-20
- [Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false](https://agentprime.io/advisories/GHSA-96qj-4jj5-wcjc.md)
  `GHSA-96qj-4jj5-wcjc`, `CVE-2026-44774`, `GO-2026-5277` · Go `github.com/traefik/traefik` and 2 more: affected `<=1.7.34`, no fixed version yet · CVSS 6.4 Medium · Not analysed yet · Published 13 May 2026 · Tags: Broken access control, CWE-15
- [Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via \`found-action\`](https://agentprime.io/advisories/GHSA-v25v-m36w-jp4h.md)
  `GHSA-v25v-m36w-jp4h`, `CVE-2026-45087`, `GO-2026-5649` · Go `github.com/hahwul/dalfox/v2`: affected `<2.13.0`, fixed in `2.13.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Command injection, Authentication bypass, CWE-15
- [Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks](https://agentprime.io/advisories/CVE-2026-41489.md)
  `CVE-2026-41489` · CVE record: pi-hole pi-hole · CVSS 8.8 High · Not analysed yet · Published 11 May 2026 · Tags: Privilege escalation, Broken access control, CWE-15
- [OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests](https://agentprime.io/advisories/GHSA-h2vw-ph2c-jvwf.md)
  `GHSA-h2vw-ph2c-jvwf`, `CVE-2026-44992` · npm `openclaw`: affected `>=2026.4.5, <2026.4.20`, fixed in `2026.4.20` · CVSS 4.1 Medium · Not analysed yet · Published 25 Apr 2026 · Tags: Hard-coded credentials, CWE-15, CWE-441
- [Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution](https://agentprime.io/advisories/GHSA-25qr-6mpr-f7qx.md)
  `GHSA-25qr-6mpr-f7qx`, `BIT-rclone-2026-41176`, `CVE-2026-41176`, `GO-2026-4964` · Go `github.com/rclone/rclone`: affected `>=1.45.0, <1.73.5`, fixed in `1.73.5` · CVSS 9.2 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.33 · Not analysed yet · Published 22 Apr 2026 · Tags: Authentication bypass, CWE-15
- [OpenClaw: Workspace .env could inject OpenClaw runtime-control variables](https://agentprime.io/advisories/GHSA-7wv4-cc7p-jhxc.md)
  `GHSA-7wv4-cc7p-jhxc`, `CVE-2026-43531` · npm `openclaw`: affected `<2026.4.9`, fixed in `2026.4.9` · CVSS 7.0 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-15
- [Cortex XDR Agent: Local Administrator can disable the agent on Windows](https://agentprime.io/advisories/CVE-2026-0232.md)
  `CVE-2026-0232` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 4.0 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-15
- [Local privilege escalation due to improper handling of environment variables.](https://agentprime.io/advisories/CVE-2026-33092.md)
  `CVE-2026-33092` · CVE record: Acronis Acronis True Image OEM and 1 more · CVSS 7.8 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-15
- [Spring Cloud Gateway's SSL bundle configuration silently bypassed](https://agentprime.io/advisories/GHSA-hwqh-2684-54fc.md)
  `GHSA-hwqh-2684-54fc`, `CVE-2026-22750` · Maven `org.springframework.cloud:spring-cloud-gateway`: affected `>=4.2.0, <4.2.1`, fixed in `4.2.1` · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-15
- [Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53](https://agentprime.io/advisories/CVE-2026-30817.md)
  `CVE-2026-30817` · CVE record: TP-Link Systems Inc. AX53 v1.0 · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-15
- [Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53](https://agentprime.io/advisories/CVE-2026-30816.md)
  `CVE-2026-30816` · CVE record: TP-Link Systems Inc. AX53 v1.0 · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-15
- [OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config](https://agentprime.io/advisories/GHSA-vfw7-6rhc-6xxg.md)
  `GHSA-vfw7-6rhc-6xxg`, `CVE-2026-41384` · npm `openclaw`: affected `<2026.3.24`, fixed in `2026.3.24` · CVSS 8.5 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-15, CWE-426
- [OpenClaw: Workspace \`.env\` can override the bundled plugin trust root](https://agentprime.io/advisories/GHSA-qcj9-wwgw-6gm8.md)
  `GHSA-qcj9-wwgw-6gm8`, `CVE-2026-41396` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 8.5 High · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-15, CWE-829
- [OpenClaw: Workspace \`.env\` can override the bundled hooks root and load attacker hook code](https://agentprime.io/advisories/GHSA-3qpv-xf3v-mm45.md)
  `GHSA-3qpv-xf3v-mm45`, `CVE-2026-41336` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 8.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-15, CWE-829
- [OpenClaw has a CWD \`.env\` environment variable injection which bypasses host-env policy and allows config takeover](https://agentprime.io/advisories/GHSA-8rh7-6779-cjqq.md)
  `GHSA-8rh7-6779-cjqq`, `CVE-2026-41294` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 8.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-15, CWE-426
- [OpenClaw has Inconsistent Host Exec Environment Override Sanitization](https://agentprime.io/advisories/GHSA-39pp-xp36-q6mg.md)
  `GHSA-39pp-xp36-q6mg`, `CVE-2026-35650` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 7.7 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-15, CWE-693
- [OpenClaw's \`system.run\` env override filtering allowed dangerous helper-command pivots](https://agentprime.io/advisories/GHSA-j425-whc4-4jgc.md)
  `GHSA-j425-whc4-4jgc` · npm `openclaw`: affected `<2026.3.7`, fixed in `2026.3.7` · CVSS 6.3 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Broken access control, CWE-15
- [Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0…](https://agentprime.io/advisories/CVE-2026-21422.md)
  `CVE-2026-21422` · CVE record: Dell PowerScale OneFS · CVSS 3.4 Low · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-15
- [OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)](https://agentprime.io/advisories/GHSA-xgf2-vxv2-rrmg.md)
  `GHSA-xgf2-vxv2-rrmg`, `CVE-2026-32056` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 7.7 High · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, CWE-15
- [OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands](https://agentprime.io/advisories/GHSA-w9cg-v44m-4qv8.md)
  `GHSA-w9cg-v44m-4qv8` · npm `openclaw`: affected `<2026.2.21`, fixed in `2026.2.21` · CVSS 4.0, no score published · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, CWE-15
- [OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths](https://agentprime.io/advisories/GHSA-5h2c-8v84-qpvr.md)
  `GHSA-5h2c-8v84-qpvr` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 5.3 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, CWE-15
- [OpenClaw's config env vars allowed startup env injection into service runtime](https://agentprime.io/advisories/GHSA-8fmp-37rc-p5g7.md)
  `GHSA-8fmp-37rc-p5g7`, `CVE-2026-22177` · npm `openclaw`: affected `<2026.2.21`, fixed in `2026.2.21` · CVSS 6.9 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-15
- [OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints](https://agentprime.io/advisories/GHSA-vmqr-rc7x-3446.md)
  `GHSA-vmqr-rc7x-3446`, `CVE-2026-22169` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 7.1 High · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, CWE-15
- [OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE)](https://agentprime.io/advisories/GHSA-2fgq-7j6h-9rm4.md)
  `GHSA-2fgq-7j6h-9rm4`, `CVE-2026-32003` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, CWE-15
- [OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows](https://agentprime.io/advisories/GHSA-hjvp-qhm6-wrh2.md)
  `GHSA-hjvp-qhm6-wrh2`, `CVE-2026-32058` · npm `openclaw`: affected `<2026.2.26`, fixed in `2026.2.26` · CVSS 2.0 Low · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control, CWE-15
- [OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)](https://agentprime.io/advisories/GHSA-82g8-464f-2mv7.md)
  `GHSA-82g8-464f-2mv7`, `CVE-2026-4039` · npm `openclaw`: affected `<2026.2.21`, fixed in `2026.2.21` · CVSS 5.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Other injection, Code injection, CWE-15, CWE-1341
- [eBay API MCP Server Affected by Environment Variable Injection](https://agentprime.io/advisories/GHSA-97rm-xj73-33jh.md)
  `GHSA-97rm-xj73-33jh`, `CVE-2026-27203` · npm `ebay-mcp`: affected `<=1.7.2`, no fixed version yet · CVSS 8.3 High · Not analysed yet · Published 19 Feb 2026 · Tags: Other injection, CWE-15
- [Shopire <= 1.0.57 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install](https://agentprime.io/advisories/CVE-2025-13091.md)
  `CVE-2025-13091` · CVE record: wpfable Shopire · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-15
- [Cursor has a Terminal Tool Allowlist Bypass via Environment Variables](https://agentprime.io/advisories/CVE-2026-22708.md)
  `CVE-2026-22708` · CVE record: cursor cursor · CVSS 7.2 High · Not analysed yet · Published 14 Jan 2026 · Tags: Other injection, Command injection, Code injection, Privilege escalation

Older: <https://agentprime.io/advisories/tag/cwe-15.md?cursor=WyIyMDI2LTAxLTE0VDE2OjQzOjU0LjAwMDAwMFoiLCJDVkUtMjAyNi0yMjcwOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-15>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-15/>. Everything for agents: <https://agentprime.io/llms.txt>.