<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-156</title><description>Every new CWE-156 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2025-55127: HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users.</title><link>https://agentprime.io/advisories/CVE-2025-55127/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55127/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Nov 2025 19:07:15 GMT</pubDate><category>CVE</category></item><item><title>OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias</title><link>https://agentprime.io/advisories/GHSA-2q8q-8fgw-9p6p/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2q8q-8fgw-9p6p/</guid><description>github.com/openbao/openbao &lt;0.0.0-20250807212521-c52795c1ef74 || &gt;=0.1.0, &lt;2.3.2, fixed in 0.0.0-20250807212521-c52795c1ef74, 2.3.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Aug 2025 15:17:09 GMT</pubDate><category>Go</category><category>github.com/openbao/openbao</category></item><item><title>OpenBao TOTP Secrets Engine Code Reuse</title><link>https://agentprime.io/advisories/GHSA-f7c3-mhj2-9pvg/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-f7c3-mhj2-9pvg/</guid><description>github.com/openbao/openbao &lt;0.0.0-20250806193153-183891f8d535 || &gt;=0.1.0, &lt;2.3.2, fixed in 0.0.0-20250806193153-183891f8d535, 2.3.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Aug 2025 14:42:49 GMT</pubDate><category>Go</category><category>github.com/openbao/openbao</category></item><item><title>HashiCorp Vault ldap auth method may not have correctly enforced MFA</title><link>https://agentprime.io/advisories/GHSA-7rx2-769v-hrwf/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7rx2-769v-hrwf/</guid><description>github.com/hashicorp/vault &lt;1.20.2, fixed in 1.20.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Aug 2025 12:31:20 GMT</pubDate><category>Go</category><category>github.com/hashicorp/vault</category></item><item><title>Hashicorp Vault&apos;s TOTP Secrets Engine Susceptible to Code Reuse </title><link>https://agentprime.io/advisories/GHSA-qv3p-fmv3-9hww/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qv3p-fmv3-9hww/</guid><description>github.com/hashicorp/vault &lt;1.20.1, fixed in 1.20.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Aug 2025 18:31:19 GMT</pubDate><category>Go</category><category>github.com/hashicorp/vault</category></item></channel></rss>