<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-186</title><description>Every new CWE-186 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-121373: Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)</title><link>https://agentprime.io/advisories/CVE-2026-121373/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-121373/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 12:59:22 GMT</pubDate><category>CVE</category></item><item><title>Net::IMAP: Denial of Service via incomplete raw argument validation</title><link>https://agentprime.io/advisories/GHSA-c4fp-cxrr-mj66/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-c4fp-cxrr-mj66/</guid><description>net-imap &lt;0.5.15 || &gt;=0.6.0, &lt;0.6.4.1, fixed in 0.5.15, 0.6.4.1. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 18:36:11 GMT</pubDate><category>RubyGems</category><category>net-imap</category></item><item><title>CVE-2025-46821: Envoy vulnerable to bypass of RBAC uri_template permission</title><link>https://agentprime.io/advisories/CVE-2025-46821/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46821/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 May 2025 21:24:07 GMT</pubDate><category>CVE</category></item></channel></rss>