<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-173</title><description>Every new CWE-173 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-103276: Ghost before 6.20.0 File Read via URL Encoding Bypass</title><link>https://agentprime.io/advisories/CVE-2026-103276/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103276/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 10:42:13 GMT</pubDate><category>CVE</category></item><item><title>Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entry</title><link>https://agentprime.io/advisories/GHSA-qxp2-vgp9-268q/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qxp2-vgp9-268q/</guid><description>ash_double_entry &gt;=0.1.0, &lt;1.0.19, fixed in 1.0.19. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 22:33:29 GMT</pubDate><category>Hex</category><category>ash_double_entry</category></item><item><title>CVE-2026-19611: Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding</title><link>https://agentprime.io/advisories/CVE-2026-19611/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19611/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 15:58:24 GMT</pubDate><category>CVE</category></item><item><title>Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution</title><link>https://agentprime.io/advisories/GHSA-2fvj-hgj9-j2gr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2fvj-hgj9-j2gr/</guid><description>org.eclipse.jetty.ee8:jetty-ee8-security &gt;=12.0.0, &lt;12.0.36 || &gt;=12.1.0, &lt;12.1.10, fixed in 12.0.36, 12.1.10. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Jul 2026 22:55:18 GMT</pubDate><category>Maven</category><category>org.eclipse.jetty.ee8:jetty-ee8-security</category><category>org.eclipse.jetty.ee9:jetty-ee9-security</category><category>org.eclipse.jetty:jetty-security</category></item><item><title>CVE-2024-54158: JetBrains YouTrack: In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack…</title><link>https://agentprime.io/advisories/CVE-2024-54158/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-54158/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Dec 2024 11:16:27 GMT</pubDate><category>CVE</category></item><item><title>Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.</title><link>https://agentprime.io/advisories/GHSA-vrjv-mxr7-vjf8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vrjv-mxr7-vjf8/</guid><description>markdown-it-py &lt;2.2.0, fixed in 2.2.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Feb 2023 00:15:00 GMT</pubDate><category>PyPI</category><category>markdown-it-py</category></item><item><title>Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.</title><link>https://agentprime.io/advisories/GHSA-jrwr-5x3p-hvc3/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jrwr-5x3p-hvc3/</guid><description>markdown-it-py &lt;2.2.0, fixed in 2.2.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Feb 2023 23:15:00 GMT</pubDate><category>PyPI</category><category>markdown-it-py</category></item><item><title>node-fetch forwards secure headers to untrusted sites</title><link>https://agentprime.io/advisories/GHSA-r683-j2x4-v87g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r683-j2x4-v87g/</guid><description>node-fetch &lt;2.6.7 || &gt;=3.0.0, &lt;3.1.1, fixed in 2.6.7, 3.1.1. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Jan 2022 23:55:52 GMT</pubDate><category>npm</category><category>node-fetch</category></item><item><title>Information Disclosure in Guava</title><link>https://agentprime.io/advisories/GHSA-5mg8-w23w-74h3/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5mg8-w23w-74h3/</guid><description>com.google.guava:guava &lt;32.0.0-android, fixed in 32.0.0-android. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Mar 2021 17:04:19 GMT</pubDate><category>Maven</category><category>com.google.guava:guava</category></item><item><title>CVE-2019-9636: Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.</title><link>https://agentprime.io/advisories/CVE-2019-9636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-9636/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Mar 2019 21:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>