agentprime: CWE-172

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

Fri, 23 Oct 2026 21:41:36 GMT

fast-uri <2.4.8 || >=3.0.0, <3.1.9 || >=4.0.0, <4.2.3, fixed in 2.4.8, 3.1.9, 4.2.3. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-95101: NGINX ngx_http_v3_module vulnerability

Wed, 14 Oct 2026 14:40:28 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

Thu, 08 Oct 2026 17:45:53 GMT

github.com/corazawaf/coraza/v3 >=3.0.0, <3.8.0, fixed in 3.8.0. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

Wed, 07 Oct 2026 20:25:29 GMT

com.rabbitmq:amqp-client <5.36.0, fixed in 5.36.0. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

Tue, 29 Sep 2026 23:51:16 GMT

fast-uri >=4.1.3, <4.1.5, fixed in 4.1.5. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-100891: Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

Mon, 28 Sep 2026 00:15:14 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

Mon, 15 Jun 2026 17:33:46 GMT

symfony/routing <5.4.53 || >=6.0.0, <6.4.41 || >=7.0.0, <7.4.13 || >=8.0.0, <8.0.13, fixed in 5.4.53, 6.4.41, 7.4.13, 8.0.13. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-42926: NGINX ngx_http_proxy_v2_module vulnerability

Wed, 13 May 2026 14:12:45 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

Thu, 27 Nov 2025 06:31:25 GMT

validator <13.15.22, fixed in 13.15.22. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-27110: Libmodsecurity3 has possible bypass of encoded HTML entities

Tue, 25 Feb 2025 20:00:44 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not in github.com/authzed/spicedb

Tue, 15 Oct 2024 15:42:40 GMT

github.com/authzed/spicedb >=1.35.0, <1.37.1, fixed in 1.37.1. CVSS 2.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

The kstring integration in gix-attributes is unsound

Thu, 25 Jul 2024 16:38:42 GMT

gix-attributes <0.22.3, fixed in 0.22.3. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

Mon, 28 Jun 2021 16:56:07 GMT

com.vaadin:vaadin-bom >=14.0.0, <14.6.2 || >=15.0.0, <19.0.9, fixed in 14.6.2, 19.0.9. CVSS 2.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Reflected cross-site scripting in development mode handler in Vaadin

Mon, 28 Jun 2021 16:52:45 GMT

com.vaadin:flow-server >=2.0.0, <2.6.2 || >=3.0.0, <6.0.10, fixed in 2.6.2, 6.0.10. CVSS 2.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-12677: Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability

Wed, 02 Oct 2019 19:06:39 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-10153: ClusterLabs fence-agents: A flaw was discovered in fence-agents, prior to version 4.3.4…

Tue, 30 Jul 2019 22:10:35 GMT

CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-10160: python: A security regression of CVE-2019-9636 was discovered in python since commit…

Fri, 07 Jun 2019 17:50:33 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

restforce vulnerable to Improper Input Validation

Fri, 03 Aug 2018 21:04:02 GMT

restforce <3.0.0, fixed in 3.0.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.