agentprime: CWE-185

CVE-2026-114653: Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder

Thu, 22 Oct 2026 19:13:58 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

follow-redirects sensitiveHeaders regex escaping can expose credential headers

Tue, 20 Oct 2026 17:53:05 GMT

follow-redirects >=1.16.0, <1.16.1, fixed in 1.16.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Mon, 19 Oct 2026 17:00:54 GMT

mercury >=3.0.0, <3.2.4, fixed in 3.2.4. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

GitHub CLI allows attestation verification bypass through unescaped regex metacharacters

Thu, 15 Oct 2026 18:08:20 GMT

github.com/cli/cli/v2 <2.97.0, fixed in 2.97.0. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-54506: Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field

Thu, 17 Sep 2026 21:47:20 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88021: Consul vulnerable to an authorization bypass in the Connect service mesh

Thu, 10 Sep 2026 18:58:26 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped

Mon, 20 Jul 2026 23:24:34 GMT

@astrojs/netlify <8.1.2, fixed in 8.1.2. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-56021: Webmin information disclosure via regex pattern

Thu, 18 Jun 2026 16:11:46 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker

Fri, 12 Jun 2026 18:23:41 GMT

@budibase/backend-core <3.35.4, fixed in 3.35.4. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Hono: IP Restriction bypasses static deny rules for non-canonical IPv6

Thu, 04 Jun 2026 18:00:22 GMT

hono <4.12.21, fixed in 4.12.21. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection

Wed, 27 May 2026 16:55:16 GMT

symfony/routing <5.4.52 || >=6.0.0, <6.4.40 || >=7.0.0, <7.4.12 || >=8.0.0, <8.0.12, fixed in 5.4.52, 6.4.40, 7.4.12, 8.0.12. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-4296: Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypass

Tue, 21 Apr 2026 22:12:45 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching

Tue, 21 Apr 2026 16:25:19 GMT

github.com/tektoncd/pipeline >=0.43.0, <1.0.2 || >=1.2.0, <1.3.4 || >=1.4.0, <1.6.2 || >=1.7.0, <1.9.3 || >=1.10.0, <1.11.1, fixed in 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots

Thu, 16 Apr 2026 20:44:46 GMT

istio.io/istio >=0.0.0-20241024090207-0bf27d49ba4b, <0.0.0-20260403004500-692e460c342d, fixed in 0.0.0-20260403004500-692e460c342d. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure

Tue, 31 Mar 2026 23:56:13 GMT

openclaw <2026.3.28, fixed in 2026.3.28. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()

Fri, 20 Mar 2026 20:35:40 GMT

@dicebear/converter <9.4.2, fixed in 9.4.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

league/commonmark has an embed extension allowed_domains bypass

Thu, 19 Mar 2026 19:04:24 GMT

league/commonmark >=2.3.0, <2.8.2, fixed in 2.8.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-27895: LAM has incorrect regular expression in PDF export component that allows user to upload files of any type

Tue, 17 Mar 2026 23:51:26 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation

Thu, 05 Mar 2026 21:29:54 GMT

fastify >=5.7.2, <5.8.1, fixed in 5.8.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

Fri, 20 Feb 2026 18:23:54 GMT

fast-xml-parser >=4.1.3, <4.5.4 || >=5.0.0, <5.3.5, fixed in 4.5.4, 5.3.5. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns

Mon, 09 Feb 2026 17:19:00 GMT

litestar >=2.19.0, <2.20.0, fixed in 2.20.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Hono IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing

Tue, 27 Jan 2026 19:01:43 GMT

hono <4.11.7, fixed in 4.11.7. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

FastAPI Guard has a regex bypass

Wed, 23 Jul 2025 15:31:12 GMT

fastapi-guard >=3.0.1, <3.0.2, fixed in 3.0.2. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-20139: Cisco Enterprise Chat and Email: A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could…

Wed, 02 Apr 2025 16:16:17 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

parse-uri Regular expression Denial of Service (ReDoS)

Thu, 16 Jan 2025 00:31:22 GMT

parse-uri <=1.0.9, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-52289: authentik has an insecure default configuration for OAuth2 Redirect URIs

Thu, 21 Nov 2024 17:18:41 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)

Thu, 24 Oct 2024 18:27:50 GMT

org.openrefine.dependencies:butterfly <1.2.6, fixed in 1.2.6. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-6641: WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration

Wed, 18 Sep 2024 05:31:13 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2223: Incorrect Regular Expression in GravityZone Update Server (VA-11465)

Tue, 09 Apr 2024 13:01:34 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Incorrect default pattern in Jenkins Audit Trail Plugin

Tue, 24 May 2022 17:30:18 GMT

org.jenkins-ci.plugins:audit-trail <3.7, fixed in 3.7. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Istio ReDoS Vulnerability

Tue, 24 May 2022 16:53:16 GMT

istio.io/istio <1.1.13 || >=1.2.0, <1.2.4, fixed in 1.1.13, 1.2.4. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Regular Expression Denial of Service (ReDoS) in braces

Thu, 06 Jan 2022 20:42:03 GMT

braces >=2.2.0, <2.3.1, fixed in 2.3.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-36093: DoS attack using PostMaster filters

Mon, 06 Sep 2021 13:15:24 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Incorrect Regular Expression in RestSharp

Wed, 14 Jul 2021 19:10:01 GMT

RestSharp <106.11.8-alpha.0.13, fixed in 106.11.8-alpha.0.13. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2020-7929: Specially crafted regex query can cause DoS

Mon, 01 Mar 2021 16:05:17 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-3408: Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability

Thu, 24 Sep 2020 18:01:59 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

Regular Expression Denial of Service in papaparse

Fri, 04 Sep 2020 18:03:04 GMT

papaparse <5.2.0, fixed in 5.2.0. CVSS 3.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2020-7016: Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.

Mon, 27 Jul 2020 18:00:15 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-11034: bypass of manageRedirect in GLPI

Tue, 05 May 2020 21:20:12 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-1741: A flaw was found in openshift-ansible.

Fri, 24 Apr 2020 18:34:07 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: Regular Expression Denial of Service in braces

Thu, 06 Jun 2019 15:30:30 GMT

braces <2.3.1, fixed in 2.3.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uap-core Regular Expression Denial of Service issue

Wed, 06 Mar 2019 17:35:47 GMT

uap-core <0.6.0, fixed in 0.6.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Django denial-of-service possibility in urlize and urlizetrunc template filters

Fri, 04 Jan 2019 17:50:07 GMT

django >=1.8a1, <1.8.19 || >=1.11a1, <1.11.11 || >=2.0a1, <2.0.3, fixed in 1.8.19, 1.11.11, 2.0.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

Fri, 04 Jan 2019 17:50:00 GMT

django >=1.8, <1.8.19 || >=1.11, <1.11.11 || >=2.0, <2.0.3, fixed in 1.8.19, 1.11.11, 2.0.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

js-bson vulnerable to REDoS

Mon, 17 Sep 2018 20:44:58 GMT

bson >=0.5.0, <1.0.5, fixed in 1.0.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Mosca REDoS Vulnerability

Fri, 31 Aug 2018 06:22:50 GMT

mosca <2.8.2, fixed in 2.8.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Regular Expression Denial of Service in sshpk

Wed, 15 Aug 2018 13:22:23 GMT

sshpk <1.13.2, fixed in 1.13.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2018-7158: Node.js: The `'path'` module in the Node.js 4.x release line contains a potential regular…

Thu, 17 May 2018 14:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.