<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-174</title><description>Every new CWE-174 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119674: mongorestore may restore encoded collection names into an unintended collection</title><link>https://agentprime.io/advisories/CVE-2026-119674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119674/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 16:21:36 GMT</pubDate><category>CVE</category></item><item><title>@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths</title><link>https://agentprime.io/advisories/GHSA-rmxm-3fg6-px4f/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rmxm-3fg6-px4f/</guid><description>@hono/node-server &gt;=1.19.10, &lt;2.1.3, fixed in 2.1.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 21:05:00 GMT</pubDate><category>npm</category><category>@hono/node-server</category></item><item><title>Echo has a Static Middleware Double-Unescape Path Traversal</title><link>https://agentprime.io/advisories/GHSA-xwq5-6cqp-vx96/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xwq5-6cqp-vx96/</guid><description>github.com/labstack/echo/v4 &lt;4.15.3, fixed in 4.15.3. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 21:04:39 GMT</pubDate><category>Go</category><category>github.com/labstack/echo/v4</category><category>github.com/labstack/echo/v5</category></item><item><title>Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths</title><link>https://agentprime.io/advisories/GHSA-5r4p-p66f-jhc7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5r4p-p66f-jhc7/</guid><description>hono &gt;=4.12.4, &lt;4.13.11, fixed in 4.13.11. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 14:36:11 GMT</pubDate><category>npm</category><category>hono</category></item><item><title>CVE-2026-93903: litespeedtech LiteSpeed Web Server: LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL…</title><link>https://agentprime.io/advisories/CVE-2026-93903/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93903/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 13:44:11 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-92839: Canva Desktop before v1.125.0 performed double decoding in the deeplink handler.</title><link>https://agentprime.io/advisories/CVE-2026-92839/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92839/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 03:53:51 GMT</pubDate><category>CVE</category></item><item><title>fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding</title><link>https://agentprime.io/advisories/GHSA-fph4-wmhf-6fwf/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fph4-wmhf-6fwf/</guid><description>fast-uri &gt;=2.4.1, &lt;2.4.5 || &gt;=3.1.2, &lt;3.1.6 || &gt;=4.0.0, &lt;4.1.3, fixed in 2.4.5, 3.1.6, 4.1.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 15:42:39 GMT</pubDate><category>npm</category><category>fast-uri</category></item></channel></rss>