# CWE-183.

Every Advisory and CVE whose sources give the weakness CWE-183, newest first.

## Records, newest first

- [vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE](https://agentprime.io/advisories/GHSA-h3rc-j82p-2c3h.md)
  `GHSA-h3rc-j82p-2c3h`, `CVE-2026-115915`, `PYSEC-2026-4346` · PyPI `vllm`: affected `<0.32.0`, fixed in `0.32.0` · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-20, CWE-183
- [nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities](https://agentprime.io/advisories/CVE-2026-117570.md)
  `CVE-2026-117570` · CVE record: Vorota-ai nmap-mcp · CVSS 4.8 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-183
- [iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist](https://agentprime.io/advisories/CVE-2026-116339.md)
  `CVE-2026-116339` · CVE record: iFlytek astron-agent · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-183, CWE-184
- [pypdf: Unvalidated JPEG image data loading](https://agentprime.io/advisories/GHSA-5hx5-vpf9-5wcv.md)
  `GHSA-5hx5-vpf9-5wcv`, `CVE-2026-113786` · PyPI `pypdf`: affected `<6.21.1`, fixed in `6.21.1` · CVSS 2.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-20, CWE-183
- [Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-5qr9-xxm9-6cmq.md)
  `GHSA-5qr9-xxm9-6cmq`, `CVE-2026-96229` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-183
- [Cross Site Scripting (XSS) vulnerability in SAPUI5](https://agentprime.io/advisories/CVE-2026-89106.md)
  `CVE-2026-89106` · CVE record: SAP_SE SAPUI5 · CVSS 4.4 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-183
- [Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml](https://agentprime.io/advisories/GHSA-4488-j8vj-vqqv.md)
  `GHSA-4488-j8vj-vqqv`, `CVE-2026-106510` · npm `@backstage/plugin-techdocs-node`: affected `<1.15.4`, fixed in `1.15.4` · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection, CWE-183
- [rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist](https://agentprime.io/advisories/CVE-2026-103687.md)
  `CVE-2026-103687` · CVE record: rhukster dom-sanitizer · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-183, CWE-184
- [Security Policy Bypass in Forcepoint Security Engine (NGFW)](https://agentprime.io/advisories/CVE-2026-12974.md)
  `CVE-2026-12974` · CVE record: Forcepoint Forcepoint Security Engine (NGFW) · CVSS 7.9 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-183, CWE-1284
- [HKUDS nanobot ExecTool shell.py ExecTool.\_spawn incomplete blacklist](https://agentprime.io/advisories/CVE-2026-90808.md)
  `CVE-2026-90808` · CVE record: HKUDS nanobot · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-183, CWE-184
- [NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover](https://agentprime.io/advisories/CVE-2026-54694.md)
  `CVE-2026-54694` · CVE record: NationalSecurityAgency skills-service · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-20, CWE-116, CWE-183
- [mcp-shell has a Secure Mode Allowlist Bypass via Default \`/bin/bash\` Executable](https://agentprime.io/advisories/GHSA-3x77-wg38-92r3.md)
  `GHSA-3x77-wg38-92r3`, `CVE-2026-55581`, `GO-2026-6290` · Go `github.com/sonirico/mcp-shell`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 8.4 High · Not analysed yet · Published 25 Aug 2026 · Tags: Command injection, CWE-183, CWE-1188
- [OpenVPN: The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through…](https://agentprime.io/advisories/CVE-2026-63649.md)
  `CVE-2026-63649` · CVE record: OpenVPN OpenVPN · CVSS 4.1 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-183
- [Duplicate Advisory: Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios](https://agentprime.io/advisories/GHSA-6hqm-hm2v-3p2p.md)
  `GHSA-6hqm-hm2v-3p2p` · npm `axios`: affected `>=1.0.0`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 1 Aug 2026 · Tags: CWE-183
- [MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft](https://agentprime.io/advisories/CVE-2026-67345.md)
  `CVE-2026-67345` · CVE record: dromara MaxKey · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-183
- [Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding](https://agentprime.io/advisories/CVE-2026-66005.md)
  `CVE-2026-66005` · CVE record: janhq jan · CVSS 5.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-183, CWE-942
- [Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios](https://agentprime.io/advisories/GHSA-f4gw-2p7v-4548.md)
  `GHSA-f4gw-2p7v-4548`, `CVE-2026-67315` · npm `axios`: affected `>=0.31.0, <0.33.0 || >=1.15.0, <1.18.0`, fixed in `0.33.0`, `1.18.0` · CVSS 6.9 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-183
- [princezuda SafestClaw Built-in Web shell.py ShellAction.\_validate_command incomplete blacklist](https://agentprime.io/advisories/CVE-2026-16129.md)
  `CVE-2026-16129` · CVE record: princezuda SafestClaw · CVSS 4.8 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: CWE-183, CWE-184
- [nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist](https://agentprime.io/advisories/CVE-2026-15625.md)
  `CVE-2026-15625` · CVE record: nextlevelbuilder GoClaw · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-183, CWE-184
- [PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload](https://agentprime.io/advisories/CVE-2026-59802.md)
  `CVE-2026-59802` · CVE record: PasswordPusher PasswordPusher · CVSS 6.3 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-183
- [PickleScan's pkgutil.resolve_name has a universal blocklist bypass](https://agentprime.io/advisories/GHSA-vvpj-8cmc-gx39.md)
  `GHSA-vvpj-8cmc-gx39`, `CVE-2026-3490`, `PYSEC-2026-456` · PyPI `picklescan`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-183
- [Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route](https://agentprime.io/advisories/CVE-2026-50189.md)
  `CVE-2026-50189` · CVE record: appsmithorg appsmith · CVSS 8.9 High · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-183
- [Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)](https://agentprime.io/advisories/GHSA-87qc-fj39-wccr.md)
  `GHSA-87qc-fj39-wccr`, `CVE-2026-46608`, `PYSEC-2026-2495` · PyPI `glances`: affected `<4.5.5`, fixed in `4.5.5` · CVSS 7.4 High · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-183, CWE-942
- [ASUS Armoury Crate: A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to…](https://agentprime.io/advisories/CVE-2026-8918.md)
  `CVE-2026-8918` · CVE record: ASUS Armoury Crate · CVSS 7.1 High · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-183
- [undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching](https://agentprime.io/advisories/GHSA-g8m3-5g58-fq7m.md)
  `GHSA-g8m3-5g58-fq7m`, `CVE-2026-11525` · npm `undici`: affected `<6.27.0 || >=7.0.0, <7.28.0 || >=8.0.0, <8.5.0`, fixed in `6.27.0`, `7.28.0`, `8.5.0` · CVSS 3.7 Low · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-183
- [Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass](https://agentprime.io/advisories/GHSA-82fg-2r99-h7v6.md)
  `GHSA-82fg-2r99-h7v6` · PyPI `picklescan`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 10.0 Critical · Withdrawn · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-183
- [Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch](https://agentprime.io/advisories/GHSA-fg94-h982-f3mm.md)
  `GHSA-fg94-h982-f3mm`, `CVE-2026-54316` · npm `@anthropic-ai/claude-code`: affected `>=0.2.54, <2.1.163`, fixed in `2.1.163` · CVSS 6.0 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Information disclosure, CWE-183, CWE-515
- [Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching](https://agentprime.io/advisories/GHSA-jwp7-wg77-3w9v.md)
  `GHSA-jwp7-wg77-3w9v`, `CVE-2026-46341` · npm `@apify/actors-mcp-server`: affected `<0.9.21`, fixed in `0.9.21` · CVSS 6.1 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-20, CWE-183
- [HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis](https://agentprime.io/advisories/GHSA-4fg7-f244-3j49.md)
  `GHSA-4fg7-f244-3j49`, `CVE-2026-46391` · npm `@haxtheweb/open-apis`: affected `<26.0.0`, fixed in `26.0.0` · CVSS 8.7 High · Not analysed yet · Published 19 May 2026 · Tags: Server-side request forgery (SSRF), CWE-183
- [gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules](https://agentprime.io/advisories/GHSA-f26g-jm89-4g65.md)
  `GHSA-f26g-jm89-4g65`, `CVE-2026-40034` · crates.io `gix`: affected `>=0.31.0, <0.83.0`, fixed in `0.83.0` · CVSS 7.3 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection, CWE-183, CWE-349, CWE-501
- [Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in \`withXSRFToken\` Boolean Coercion](https://agentprime.io/advisories/GHSA-xx6v-rp6x-q39c.md)
  `GHSA-xx6v-rp6x-q39c`, `CVE-2026-42042` · npm `axios`: affected `<0.31.1 || >=1.0.0, <1.15.1`, fixed in `0.31.1`, `1.15.1` · CVSS 5.4 Medium · Not analysed yet · Published 5 May 2026 · Tags: Information disclosure, CWE-183
- [Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0](https://agentprime.io/advisories/GHSA-pmwg-cvhr-8vh7.md)
  `GHSA-pmwg-cvhr-8vh7`, `CVE-2026-42043` · npm `axios`: affected `<0.31.1 || >=1.0.0, <1.15.1`, fixed in `0.31.1`, `1.15.1` · CVSS 7.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-183, CWE-441
- [NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin](https://agentprime.io/advisories/CVE-2026-29514.md)
  `CVE-2026-29514` · CVE record: netbox-community netbox · CVSS 8.7 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-183
- [Netfoil has incorrect allowlist enforcement](https://agentprime.io/advisories/GHSA-84g5-x8j3-7235.md)
  `GHSA-84g5-x8j3-7235`, `GO-2026-5240` · Go `github.com/tinfoil-factory/netfoil`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 4.0, no score published · Not analysed yet · Published 29 Apr 2026 · Tags: CWE-183, CWE-193
- [DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)](https://agentprime.io/advisories/GHSA-h7mw-gpvr-xq4m.md)
  `GHSA-h7mw-gpvr-xq4m`, `CVE-2026-41240` · npm `dompurify`: affected `<3.4.0`, fixed in `3.4.0` · CVSS 6.0 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Cross-site scripting (XSS), CWE-183
- [OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths](https://agentprime.io/advisories/GHSA-f934-5rqf-xx47.md)
  `GHSA-f934-5rqf-xx47`, `CVE-2026-44111` · npm `openclaw`: affected `<2026.4.15`, fixed in `2026.4.15` · CVSS 2.3 Low · Not analysed yet · Published 17 Apr 2026 · Tags: Path traversal, CWE-183
- [OpenClaw: Empty approver lists could grant explicit approval authorization](https://agentprime.io/advisories/GHSA-49cg-279w-m73x.md)
  `GHSA-49cg-279w-m73x`, `CVE-2026-43574` · npm `openclaw`: affected `<2026.4.12`, fixed in `2026.4.12` · CVSS 6.0 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, CWE-183
- [DataEase has an Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2026-40899.md)
  `CVE-2026-40899` · CVE record: dataease dataease · CVSS 8.3 High · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-183
- [JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root](https://agentprime.io/advisories/CVE-2026-21915.md)
  `CVE-2026-21915` · CVE record: Juniper Networks JSI LWC · CVSS 8.4 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-183
- [DOMPurify ADD_ATTR predicate skips URI validation](https://agentprime.io/advisories/GHSA-cjmm-f4jc-qw8r.md)
  `GHSA-cjmm-f4jc-qw8r`, `CVE-2026-65912` · npm `dompurify`: affected `<3.3.2`, fixed in `3.3.2` · CVSS 5.1 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Cross-site scripting (XSS), CWE-183
- [OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides](https://agentprime.io/advisories/GHSA-j7p2-qcwm-94v4.md)
  `GHSA-j7p2-qcwm-94v4`, `CVE-2026-41387` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 8.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-183
- [Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk)](https://agentprime.io/advisories/GHSA-3843-rr4g-m8jq.md)
  `GHSA-3843-rr4g-m8jq`, `CVE-2026-33979` · npm `express-xss-sanitizer`: affected `<2.0.2`, fixed in `2.0.2` · CVSS 8.2 High · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), CWE-183
- [OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation](https://agentprime.io/advisories/GHSA-pw7h-9g6p-c378.md)
  `GHSA-pw7h-9g6p-c378`, `CVE-2026-35649` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 6.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control, CWE-183
- [Astro: Remote allowlist bypass via unanchored matchPathname wildcard](https://agentprime.io/advisories/GHSA-g735-7g2w-hh3f.md)
  `GHSA-g735-7g2w-hh3f`, `CVE-2026-33769` · npm `astro`: affected `>=2.10.10, <5.18.1`, fixed in `5.18.1` · CVSS 2.9 Low · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-20, CWE-183
- [PbootCMS File Upload file.php incomplete blacklist](https://agentprime.io/advisories/CVE-2026-4509.md)
  `CVE-2026-4509` · CVE record: PbootCMS · CVSS 5.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-183, CWE-184
- [Permissive List of Allowed Inputs in ewe](https://agentprime.io/advisories/GHSA-9w88-79f8-m3vp.md)
  `GHSA-9w88-79f8-m3vp`, `CVE-2026-32881` · Hex `ewe`: affected `>=0.6.0, <3.0.5`, fixed in `3.0.5` · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-183
- [mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling](https://agentprime.io/advisories/GHSA-cp6g-7hqx-qxhp.md)
  `GHSA-cp6g-7hqx-qxhp`, `CVE-2026-2303`, `GO-2026-5327` · Go `go.mongodb.org/mongo-driver` and 1 more: affected `<1.17.7`, fixed in `1.17.7` · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-183
- [Unsafe Reflection in Mongoid::Criteria.from_hash](https://agentprime.io/advisories/CVE-2026-2302.md)
  `CVE-2026-2302` · CVE record: MongoDB Inc MongoDB Ruby Driver · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-183
- [n8n: Webhook Node IP Whitelist Bypass via Partial String Matching](https://agentprime.io/advisories/GHSA-w96v-gf22-crwp.md)
  `GHSA-w96v-gf22-crwp`, `CVE-2025-68949` · npm `n8n`: affected `>=1.36.0, <2.2.0`, fixed in `2.2.0` · CVSS 5.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, Broken access control, CWE-183
- [JetBrains TeamCity: In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential…](https://agentprime.io/advisories/CVE-2025-59457.md)
  `CVE-2025-59457` · CVE record: JetBrains TeamCity · CVSS 7.7 High · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-183
- [Microsoft Purview Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53762.md)
  `CVE-2025-53762` · CVE record: Microsoft Microsoft Purview · CVSS 8.7 High · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-183
- [filebrowser Allows Shell Commands to Spawn Other Commands](https://agentprime.io/advisories/GHSA-3q2w-42mv-cph4.md)
  `GHSA-3q2w-42mv-cph4`, `CVE-2025-52903`, `GO-2025-3786` · Go `github.com/filebrowser/filebrowser/v2`: affected `<2.33.10`, fixed in `2.33.10` · CVSS 8.0 High · Not analysed yet · Published 27 Jun 2025 · Tags: Command injection, CWE-183, CWE-749
- [A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network int…](https://agentprime.io/advisories/CVE-2025-24349.md)
  `CVE-2025-24349` · CVE record: Bosch Rexroth AG ctrlX OS - Device Admin · CVSS 7.1 High · Not analysed yet · Published 30 Apr 2025 · Tags: CWE-183
- [A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).](https://agentprime.io/advisories/CVE-2024-47565.md)
  `CVE-2024-47565` · CVE record: Siemens SINEC Security Monitor · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-183
- [CSP bypass in Hush Line](https://agentprime.io/advisories/CVE-2024-38522.md)
  `CVE-2024-38522` · CVE record: scidsg hushline · CVSS 6.3 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-183
- [Iperf3: possible denial of service](https://agentprime.io/advisories/CVE-2023-7250.md)
  `CVE-2023-7250` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-183
- [Unauthorized write operations in PaperCut NG/MF](https://agentprime.io/advisories/CVE-2024-1654.md)
  `CVE-2024-1654` · CVE record: PaperCut PaperCut NG, PaperCut MF · CVSS 7.2 High · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-183
- [Grafana is an open-source platform for monitoring and observability.](https://agentprime.io/advisories/CVE-2023-4399.md)
  `CVE-2023-4399` · CVE record: Grafana Grafana Enterprise · CVSS 6.6 Medium · Not analysed yet · Published 17 Oct 2023 · Tags: CWE-183
- [A permissive list of allowed inputs vulnerability \[CWE-183\] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the…](https://agentprime.io/advisories/CVE-2022-42469.md)
  `CVE-2022-42469` · CVE record: Fortinet FortiOS · CVSS 4.1 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-183
- [PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability.](https://agentprime.io/advisories/CVE-2022-34450.md)
  `CVE-2022-34450` · CVE record: Dell PowerPath Management Appliance · CVSS 6.7 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-183

Older: <https://agentprime.io/advisories/tag/cwe-183.md?cursor=WyIyMDIzLTAyLTEwVDIwOjU2OjMyLjkzOTAwMFoiLCJDVkUtMjAyMi0zNDQ1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-183>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-183/>. Everything for agents: <https://agentprime.io/llms.txt>.