agentprime: CWE-184Every new CWE-184 Advisory and CVE.https://agentprime.io/CVE-2026-113663: AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command executionhttps://agentprime.io/advisories/CVE-2026-113663/https://agentprime.io/advisories/CVE-2026-113663/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:53:40 GMTCVECVE-2026-121949: Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypasshttps://agentprime.io/advisories/CVE-2026-121949/https://agentprime.io/advisories/CVE-2026-121949/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:46:04 GMTCVECVE-2026-123125: Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypasshttps://agentprime.io/advisories/CVE-2026-123125/https://agentprime.io/advisories/CVE-2026-123125/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:55:11 GMTCVECVE-2026-118517: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority: Incomplete Fix for CVE-2026-45066https://agentprime.io/advisories/PKSA-n87g-t5cn-m1yq/https://agentprime.io/advisories/PKSA-n87g-t5cn-m1yq/symfony/html-sanitizer >=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.50 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.23 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.11, fixed in 6.2.0, 6.3.0, 6.4.0, 6.4.50, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.23, 8.1.0, 8.1.11. CVSS 2.3 (Low). Published by Packagist. Not analysed by agentprime yet.Wed, 04 Nov 2026 11:23:22 GMTPackagistsymfony/html-sanitizerCVE-2026-118517: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority: Incomplete Fix for CVE-2026-45066https://agentprime.io/advisories/PKSA-66zq-5hky-mbzt/https://agentprime.io/advisories/PKSA-66zq-5hky-mbzt/symfony/symfony >=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.50 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.23 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.11, fixed in 6.2.0, 6.3.0, 6.4.0, 6.4.50, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.23, 8.1.0, 8.1.11. CVSS 2.3 (Low). Published by Packagist. Not analysed by agentprime yet.Wed, 04 Nov 2026 11:23:22 GMTPackagistsymfony/symfonyCVE-2026-119567: vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliaseshttps://agentprime.io/advisories/CVE-2026-119567/https://agentprime.io/advisories/CVE-2026-119567/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:31:13 GMTCVEPraisonAI vulnerable to Remote Code Execution via Broken AST Sandboxhttps://agentprime.io/advisories/GHSA-26mh-57q7-jfvr/https://agentprime.io/advisories/GHSA-26mh-57q7-jfvr/praisonai <4.6.78, fixed in 4.6.78. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 29 Oct 2026 16:34:26 GMTPyPIpraisonaiCVE-2026-96196: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-96196/https://agentprime.io/advisories/CVE-2026-96196/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:21:50 GMTCVEHydra legacy target blacklist permits unsafe PyYAML loadinghttps://agentprime.io/advisories/GHSA-wf6j-7hvr-gr93/https://agentprime.io/advisories/GHSA-wf6j-7hvr-gr93/hydra-core >=1.3.6, <1.3.8 || >=1.4.0.dev9, <1.4.0rc3, fixed in 1.3.8, 1.4.0rc3. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:08:41 GMTPyPIhydra-coreAuthlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keyshttps://agentprime.io/advisories/GHSA-7vr2-2fgp-9w7p/https://agentprime.io/advisories/GHSA-7vr2-2fgp-9w7p/authlib >=1.3.1, <1.9.0, fixed in 1.9.0. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 15:38:48 GMTPyPIauthlibCVE-2026-117530: JetBrains Junie CLI: In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete…https://agentprime.io/advisories/CVE-2026-117530/https://agentprime.io/advisories/CVE-2026-117530/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:21:27 GMTCVECVE-2026-116339: iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklisthttps://agentprime.io/advisories/CVE-2026-116339/https://agentprime.io/advisories/CVE-2026-116339/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:30:18 GMTCVECVE-2026-115845: Incomplete validation in the run_script Python sandbox in AWS MCP Serverhttps://agentprime.io/advisories/CVE-2026-115845/https://agentprime.io/advisories/CVE-2026-115845/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:04:44 GMTCVECVE-2026-115751: mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostnamehttps://agentprime.io/advisories/CVE-2026-115751/https://agentprime.io/advisories/CVE-2026-115751/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:03:33 GMTCVECVE-2026-114729: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content…https://agentprime.io/advisories/CVE-2026-114729/https://agentprime.io/advisories/CVE-2026-114729/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 02:05:39 GMTCVECVE-2026-114728: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content…https://agentprime.io/advisories/CVE-2026-114728/https://agentprime.io/advisories/CVE-2026-114728/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 02:02:49 GMTCVECVE-2026-113605: Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-databasehttps://agentprime.io/advisories/CVE-2026-113605/https://agentprime.io/advisories/CVE-2026-113605/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:32 GMTCVECVE-2026-112777: Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCEhttps://agentprime.io/advisories/CVE-2026-112777/https://agentprime.io/advisories/CVE-2026-112777/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 19:10:54 GMTCVENginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)https://agentprime.io/advisories/GHSA-cf23-7qxj-xmhr/https://agentprime.io/advisories/GHSA-cf23-7qxj-xmhr/github.com/0xJacky/Nginx-UI <1.9.10-0.20260703131214-23d1934099b0, fixed in 1.9.10-0.20260703131214-23d1934099b0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 15 Oct 2026 20:13:52 GMTGogithub.com/0xJacky/Nginx-UICVE-2026-77466: Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selectionhttps://agentprime.io/advisories/CVE-2026-77466/https://agentprime.io/advisories/CVE-2026-77466/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 16:36:58 GMTCVECVE-2026-104024: Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationhttps://agentprime.io/advisories/CVE-2026-104024/https://agentprime.io/advisories/CVE-2026-104024/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 13:30:13 GMTCVECVE-2026-102087: Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crasheshttps://agentprime.io/advisories/CVE-2026-102087/https://agentprime.io/advisories/CVE-2026-102087/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:23:55 GMTCVECVE-2026-108471: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-108471/https://agentprime.io/advisories/CVE-2026-108471/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:01:45 GMTCVECVE-2026-110205: Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitutionhttps://agentprime.io/advisories/CVE-2026-110205/https://agentprime.io/advisories/CVE-2026-110205/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:49:57 GMTCVECVE-2026-108976: GNU Emacs: GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a…https://agentprime.io/advisories/CVE-2026-108976/https://agentprime.io/advisories/CVE-2026-108976/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 20:11:10 GMTCVECVE-2026-107322: OS command injection in Amazon Agent Plugins for AWS databases-on-awshttps://agentprime.io/advisories/CVE-2026-107322/https://agentprime.io/advisories/CVE-2026-107322/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:39:27 GMTCVEHandlebars: JavaScript Injection via Own Property Check Bypasshttps://agentprime.io/advisories/GHSA-p8wg-vrv2-v86f/https://agentprime.io/advisories/GHSA-p8wg-vrv2-v86f/handlebars >=3.0.0, <4.7.10, fixed in 4.7.10. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 08 Oct 2026 17:52:26 GMTnpmhandlebarscriticalGhost: Private IP Filtering Bypass via IPv6 Transition Addresseshttps://agentprime.io/advisories/GHSA-r7f2-6fj8-6fg2/https://agentprime.io/advisories/GHSA-r7f2-6fj8-6fg2/ghost >=6.0.9, <6.65.0, fixed in 6.65.0. CVSS 4.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:35:27 GMTnpmghostGhost: Stored XSS via oEmbed Photo Responseshttps://agentprime.io/advisories/GHSA-v3xr-g6p2-fvgv/https://agentprime.io/advisories/GHSA-v3xr-g6p2-fvgv/ghost >=2.5.0, <6.64.0, fixed in 6.64.0. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:27:46 GMTnpmghostHydra instantiate target blacklist bypasses permit code executionhttps://agentprime.io/advisories/GHSA-rqx7-p7vv-w7hr/https://agentprime.io/advisories/GHSA-rqx7-p7vv-w7hr/hydra-core >=1.3.4, <1.3.6 || >=1.4.0.dev0, <1.4.0.dev9, fixed in 1.3.6, 1.4.0.dev9. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Oct 2026 18:03:49 GMTPyPIhydra-coreCVE-2026-106556: Backstage: Configuration bypass in TechDocs mkdocs.yml sanitizationhttps://agentprime.io/advisories/CVE-2026-106556/https://agentprime.io/advisories/CVE-2026-106556/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 14:39:36 GMTCVECVE-2026-106218: JetBrains TeamCity: In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE…https://agentprime.io/advisories/CVE-2026-106218/https://agentprime.io/advisories/CVE-2026-106218/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 16:33:06 GMTCVECVE-2026-105791: Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injectionhttps://agentprime.io/advisories/CVE-2026-105791/https://agentprime.io/advisories/CVE-2026-105791/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 14:09:23 GMTCVECVE-2026-105789: Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` toolhttps://agentprime.io/advisories/CVE-2026-105789/https://agentprime.io/advisories/CVE-2026-105789/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 14:07:25 GMTCVEsimple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionhttps://agentprime.io/advisories/GHSA-v5rq-49vh-5v5c/https://agentprime.io/advisories/GHSA-v5rq-49vh-5v5c/@simple-git/argv-parser <2.0.1, fixed in 2.0.1. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 05 Oct 2026 23:48:21 GMTnpm@simple-git/argv-parsercriticalsimple-git unsafe-operation guard does not block trailer command configurationhttps://agentprime.io/advisories/GHSA-x6jw-m9v5-85vh/https://agentprime.io/advisories/GHSA-x6jw-m9v5-85vh/simple-git >=3.15.0, <4.0.1, fixed in 4.0.1. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 05 Oct 2026 23:48:14 GMTnpmsimple-gitcriticalCVE-2026-103687: rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklisthttps://agentprime.io/advisories/CVE-2026-103687/https://agentprime.io/advisories/CVE-2026-103687/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 14:30:12 GMTCVECVE-2026-101884: OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Overridehttps://agentprime.io/advisories/CVE-2026-101884/https://agentprime.io/advisories/CVE-2026-101884/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 19:16:04 GMTCVECVE-2026-101882: OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.sethttps://agentprime.io/advisories/CVE-2026-101882/https://agentprime.io/advisories/CVE-2026-101882/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 19:16:03 GMTCVECVE-2026-100253: JetBrains TeamCity: In JetBrains TeamCity before 2026.2, 2026.1.4…https://agentprime.io/advisories/CVE-2026-100253/https://agentprime.io/advisories/CVE-2026-100253/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 15:17:44 GMTCVECVE-2026-55096: SSRF via DNS-resolution gap in _validate_url_security (file download by URL)https://agentprime.io/advisories/CVE-2026-55096/https://agentprime.io/advisories/CVE-2026-55096/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 16:38:26 GMTCVECVE-2026-63206: Zammad: Remote image tracking bypass via shortened URL schemehttps://agentprime.io/advisories/CVE-2026-63206/https://agentprime.io/advisories/CVE-2026-63206/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:14:06 GMTCVE@bytebase/dbhub's read-only mode does not prevent database writeshttps://agentprime.io/advisories/GHSA-mwwr-p57h-56pf/https://agentprime.io/advisories/GHSA-mwwr-p57h-56pf/@bytebase/dbhub <0.22.6, fixed in 0.22.6. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:37:59 GMTnpm@bytebase/dbhubCVE-2026-97149: OpenStack Swift: In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From…https://agentprime.io/advisories/CVE-2026-97149/https://agentprime.io/advisories/CVE-2026-97149/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 02:25:49 GMTCVECVE-2026-84714: Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-co…https://agentprime.io/advisories/CVE-2026-84714/https://agentprime.io/advisories/CVE-2026-84714/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 19:40:06 GMTCVECVE-2026-84706: Automation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution i…https://agentprime.io/advisories/CVE-2026-84706/https://agentprime.io/advisories/CVE-2026-84706/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 19:39:57 GMTCVECVE-2026-75884: Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groupshttps://agentprime.io/advisories/CVE-2026-75884/https://agentprime.io/advisories/CVE-2026-75884/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 19:39:52 GMTCVEcriticalMCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)https://agentprime.io/advisories/GHSA-w66g-j6c4-hcfc/https://agentprime.io/advisories/GHSA-w66g-j6c4-hcfc/mcp-atlassian <0.22.0, fixed in 0.22.0. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:34:47 GMTPyPImcp-atlassianCVE-2026-67615: openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invokerhttps://agentprime.io/advisories/CVE-2026-67615/https://agentprime.io/advisories/CVE-2026-67615/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:30:55 GMTCVECVE-2026-61851: Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Toolhttps://agentprime.io/advisories/CVE-2026-61851/https://agentprime.io/advisories/CVE-2026-61851/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 21:40:53 GMTCVE