<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-179</title><description>Every new CWE-179 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-84177: Apache Wicket: A component&apos;s markup is served as a package resource when its class name contains an underscore</title><link>https://agentprime.io/advisories/CVE-2026-84177/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84177/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 01 Nov 2026 22:25:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90813: cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize</title><link>https://agentprime.io/advisories/CVE-2026-90813/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90813/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 19:15:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-49414: ASLR bypass for setuid executables via procctl(2)</title><link>https://agentprime.io/advisories/CVE-2026-49414/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-49414/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 27 Jun 2026 09:22:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3832: Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response</title><link>https://agentprime.io/advisories/CVE-2026-3832/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3832/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Apr 2026 17:41:28 GMT</pubDate><category>CVE</category></item><item><title>Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment</title><link>https://agentprime.io/advisories/GHSA-h39g-6x3c-7fq9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h39g-6x3c-7fq9/</guid><description>Zio &lt;0.22.2, fixed in 0.22.2. CVSS 3.8 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Apr 2026 00:55:19 GMT</pubDate><category>NuGet</category><category>Zio</category></item><item><title>Traefik has a Potential mTLS Bypass via Fragmented TLS ClientHello Causing Pre-SNI Sniff Fallback to Default Non-mTLS TLS Config in github.com/traefik/traefik</title><link>https://agentprime.io/advisories/GHSA-wvvq-wgcr-9q48/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wvvq-wgcr-9q48/</guid><description>github.com/traefik/traefik *, no fixed version yet. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 23 Mar 2026 18:16:14 GMT</pubDate><category>Go</category><category>github.com/traefik/traefik</category><category>github.com/traefik/traefik/v2</category><category>github.com/traefik/traefik/v3</category></item><item><title>Fastify&apos;s Content-Type header tab character allows body validation bypass</title><link>https://agentprime.io/advisories/GHSA-jx2c-rxcm-jvmq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jx2c-rxcm-jvmq/</guid><description>fastify &lt;5.7.2, fixed in 5.7.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Feb 2026 22:23:29 GMT</pubDate><category>npm</category><category>fastify</category></item><item><title>lockfile-lint-api Vulnerable to Incorrect Behavior Order</title><link>https://agentprime.io/advisories/GHSA-7cfr-5cjf-32p4/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7cfr-5cjf-32p4/</guid><description>lockfile-lint-api &lt;5.9.2, fixed in 5.9.2. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 16 May 2025 06:30:24 GMT</pubDate><category>npm</category><category>lockfile-lint-api</category></item><item><title>CVE-2024-41686: Password Policy Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-41686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41686/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jul 2024 11:45:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1271: An arbitrary file write vulnerability was found in GNU gzip&apos;s zgrep utility.</title><link>https://agentprime.io/advisories/CVE-2022-1271/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1271/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Aug 2022 15:33:00 GMT</pubDate><category>CVE</category></item></channel></rss>