agentprime: CWE-176

SD JWT JS: Tampered disclosures silently dropped instead of rejected

Mon, 02 Nov 2026 17:54:39 GMT

@sd-jwt/core <0.20.0, fixed in 0.20.0. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-116542: Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding

Mon, 26 Oct 2026 14:59:41 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114114: Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters

Wed, 21 Oct 2026 00:37:12 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110687: Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp

Mon, 19 Oct 2026 18:12:22 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110674: Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv

Mon, 19 Oct 2026 18:11:25 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89074: MOVEit Transfer Email MFA Bypass

Wed, 14 Oct 2026 15:12:49 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105241: Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Tue, 06 Oct 2026 19:49:03 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19954: Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names

Mon, 05 Oct 2026 06:54:09 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86105: Fireware OS Improper Authorization in Access Portal Reverse Proxy

Tue, 29 Sep 2026 23:05:47 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

Tue, 29 Sep 2026 17:59:10 GMT

go.opentelemetry.io/otel/sdk >=1.10.0, <1.33.0, fixed in 1.33.0. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-93990: Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate

Sat, 19 Sep 2026 22:58:11 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93751: uri-js through 4.4.1 Improper UTF-8 Decoding via pctDecChars

Fri, 18 Sep 2026 17:51:36 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14978: Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions

Wed, 19 Aug 2026 21:08:16 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

Tue, 21 Jul 2026 19:09:21 GMT

setuptools <83.0.0, fixed in 83.0.0. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ln: rejects non-UTF-8 source filenames in target-directory mode

Mon, 06 Jul 2026 19:53:39 GMT

uu_ln <0.6.0, fixed in 0.6.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output

Mon, 06 Jul 2026 19:51:22 GMT

uu_comm <0.6.0, fixed in 0.6.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-48618: node: A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling…

Fri, 26 Jun 2026 01:14:36 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)

Tue, 16 Jun 2026 19:11:52 GMT

deno <2.7.14, fixed in 2.7.14. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-71316: SQLite sqldiff remote code execution via argument injection

Thu, 04 Jun 2026 17:39:38 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files

Mon, 18 May 2026 13:40:58 GMT

github.com/caddyserver/caddy/v2 >=2.7.0, <2.11.3, fixed in 2.11.3. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files

Fri, 15 May 2026 17:09:46 GMT

github.com/dunglas/frankenphp >=1.11.2, <1.12.3, fixed in 1.12.3. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

protobufjs has overlong UTF-8 decoding

Tue, 12 May 2026 15:00:11 GMT

protobufjs <7.5.6 || >=8.0.0, <8.0.2, fixed in 7.5.6, 8.0.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-7040: Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters

Mon, 27 Apr 2026 12:29:53 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue

Wed, 22 Apr 2026 18:31:46 GMT

coreutils <=0.8.0, no fixed version yet. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uutils coreutils has an Improper Handling of Unicode Encoding Issue

Wed, 22 Apr 2026 18:31:46 GMT

coreutils <0.8.0, fixed in 0.8.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: coreutils' comm utility silently corrupts data by performing lossy UTF-8 conversion on all output lines

Wed, 22 Apr 2026 18:31:45 GMT

coreutils <0.6.0, fixed in 0.6.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-20202: Improper Input Validation during User Account Creation in Splunk Enterprise

Wed, 15 Apr 2026 15:17:43 GMT

CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4116: SonicWall SMA1000: Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…

Thu, 09 Apr 2026 14:27:29 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4114: SonicWall SMA1000: Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…

Thu, 09 Apr 2026 14:25:41 GMT

CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2006-10002: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes

Thu, 19 Mar 2026 11:03:46 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists

Mon, 02 Mar 2026 21:49:33 GMT

openclaw <2026.3.1, fixed in 2026.3.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Mon, 09 Feb 2026 17:19:06 GMT

litestar >=2.19.0, <2.20.0, fixed in 2.20.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS

Wed, 21 Jan 2026 01:05:49 GMT

tar <7.5.4, fixed in 7.5.4. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-55129: Revive Adserver: HackerOne community member Kassem S.(kassem_s94) has reported that username handling in…

Tue, 02 Dec 2025 01:42:06 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59547: DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation

Tue, 23 Sep 2025 17:56:47 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-43093: In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization.

Wed, 13 Nov 2024 17:25:14 GMT

CVSS 7.3 (High). Critical: In CISA’s KEV catalogue since 7 Nov 2024: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47611: XZ Utils on Microsoft Windows platform are vulnerable to argument injection

Wed, 02 Oct 2024 14:16:07 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-8067: Unicode "best fit" argument injection

Tue, 24 Sep 2024 15:53:35 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-20190: Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack.

Tue, 26 Mar 2024 00:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-24691: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation

Wed, 14 Feb 2024 00:01:30 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

ewen-lbh/ffcss Late-Unicode normalization vulnerability

Thu, 28 Dec 2023 21:16:57 GMT

github.com/ewen-lbh/ffcss <0.2.0, fixed in 0.2.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-41889: Late-Unicode normalization vulnerability in SHIRASAGI

Fri, 15 Sep 2023 20:09:27 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-31169: Improper Handling of Unicode Encoding

Thu, 31 Aug 2023 15:30:23 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-39213: Zoom Video Communications…: Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom…

Tue, 08 Aug 2023 21:36:13 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-29812: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode…

Thu, 28 Apr 2022 09:55:19 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Ciphertext Malleability Issue in Tink Java

Fri, 16 Oct 2020 00:51:24 GMT

com.google.crypto.tink:tink <1.5.0, fixed in 1.5.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.