agentprime: CWE-226

CVE-2026-114366: Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework

Fri, 06 Nov 2026 04:40:04 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119179: MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data

Tue, 03 Nov 2026 13:33:39 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Fri, 23 Oct 2026 21:53:21 GMT

pillow >=11.2.1, <13.0.0, fixed in 13.0.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-107315: pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)

Wed, 07 Oct 2026 23:03:18 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

Wed, 07 Oct 2026 20:24:42 GMT

SixLabors.ImageSharp >=4.0.0, <4.1.2, fixed in 4.1.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

devalue: `stringify`/`uneval` serialize shared memory

Thu, 01 Oct 2026 15:18:06 GMT

devalue >=5.1.0, <5.9.3, fixed in 5.9.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-18023: ASUS Armoury Crate: Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver…

Tue, 08 Sep 2026 02:03:38 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74250: OpenStack Ironic: In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run…

Fri, 14 Aug 2026 22:53:18 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47247: libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

Tue, 21 Jul 2026 21:16:59 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13585: Resource allocation without limits in ASUS System Control Interface v3 and others

Wed, 15 Jul 2026 02:01:10 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48984: pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap

Thu, 18 Jun 2026 17:06:00 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-32960: silex technology, Inc. SD-330AC: SD-330AC and AMC Manager provided by silex technology…

Mon, 20 Apr 2026 03:18:47 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Tue, 14 Apr 2026 00:06:27 GMT

org.eclipse.jetty.ee10:jetty-ee10-jaspi >=12.1.0, <12.1.8 || >=12.0.0, <12.0.34, fixed in 12.1.8, 12.0.34. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Wed, 08 Apr 2026 15:31:44 GMT

org.eclipse.jetty.ee10:jetty-ee10 >=12.1.0, <12.1.7 || >=12.0.0, <12.0.33 || >=11.0.0, <11.0.28 || >=10.0.0, <10.0.28 || >=9.4.0, <9.4.60, fixed in 12.1.7, 12.0.33, 11.0.28, 10.0.28, 9.4.60. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-14858: Semtech LR11xx Encrypted Firmware Disclosure

Tue, 07 Apr 2026 19:57:43 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-25657: AnyBurn 4.3 x86 Denial of Service via Image Conversion

Sun, 05 Apr 2026 20:45:13 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding

Fri, 27 Mar 2026 22:28:25 GMT

openclaw <=2026.3.24, no fixed version yet. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()

Tue, 24 Mar 2026 22:09:49 GMT

scriban <7.0.0, fixed in 7.0.0. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-25645: WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service

Tue, 24 Mar 2026 11:27:15 GMT