<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-228</title><description>Every new CWE-228 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>msgpack5: Reserved byte can cause unbounded stream buffering</title><link>https://agentprime.io/advisories/GHSA-26wq-p25c-j6fv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-26wq-p25c-j6fv/</guid><description>msgpack5 &lt;6.1.0, fixed in 6.1.0. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 17:40:01 GMT</pubDate><category>npm</category><category>msgpack5</category></item><item><title>Langflow: Weak Fernet Key via random.seed()</title><link>https://agentprime.io/advisories/GHSA-jxw3-mjmx-3pqm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jxw3-mjmx-3pqm/</guid><description>langflow &lt;1.10.1, fixed in 1.10.1. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 22:31:35 GMT</pubDate><category>PyPI</category><category>langflow</category></item><item><title>CVE-2026-87986: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it&apos;s parser cannot interpret.</title><link>https://agentprime.io/advisories/CVE-2026-87986/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-87986/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Sep 2026 14:31:20 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-50103: Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850</title><link>https://agentprime.io/advisories/CVE-2026-50103/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50103/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 20:50:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59174: Ericsson Packet Core Controller: Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability…</title><link>https://agentprime.io/advisories/CVE-2025-59174/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59174/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Jun 2026 13:44:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25657: Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-25657/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25657/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Jun 2026 11:03:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42100: DoS in Sparx Pro Cloud Server</title><link>https://agentprime.io/advisories/CVE-2026-42100/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42100/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 12:59:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34232: Firebird: DoS via `op_response` packet from client</title><link>https://agentprime.io/advisories/CVE-2026-34232/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34232/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Apr 2026 18:52:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-53828: Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-53828/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-53828/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Apr 2026 09:49:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20125: Cisco IOS: A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE…</title><link>https://agentprime.io/advisories/CVE-2026-20125/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20125/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Mar 2026 16:04:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2529: IBM Terracotta denial of service</title><link>https://agentprime.io/advisories/CVE-2025-2529/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2529/</guid><description>CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Oct 2025 15:29:04 GMT</pubDate><category>CVE</category></item><item><title>CometBFT&apos;s invalid BitArray handling can lead to network halt</title><link>https://agentprime.io/advisories/GHSA-hrhf-2vcr-ghch/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hrhf-2vcr-ghch/</guid><description>github.com/cometbft/cometbft &lt;0.37.16 || &gt;=0.38.0-alpha.1, &lt;0.38.19, fixed in 0.37.16, 0.38.19. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Oct 2025 19:57:30 GMT</pubDate><category>Go</category><category>github.com/cometbft/cometbft</category></item><item><title>libsql-sqlite3-parser crash due to invalid UTF-8 input</title><link>https://agentprime.io/advisories/GHSA-8m95-fffc-h4c5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8m95-fffc-h4c5/</guid><description>libsql-sqlite3-parser &lt;=0.13.0, no fixed version yet. CVSS 2.9 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 09 May 2025 06:32:36 GMT</pubDate><category>crates.io</category><category>libsql-sqlite3-parser</category></item><item><title>CVE-2024-55594: Fortinet FortiWeb: An improper handling of syntactically invalid structure in Fortinet FortiWeb at least…</title><link>https://agentprime.io/advisories/CVE-2024-55594/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-55594/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Mar 2025 16:25:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-42784: Fortinet FortiWeb: An improper handling of syntactically invalid structure in Fortinet FortiWeb at least…</title><link>https://agentprime.io/advisories/CVE-2023-42784/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42784/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Mar 2025 14:54:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0343: Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions.</title><link>https://agentprime.io/advisories/CVE-2025-0343/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0343/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jan 2025 00:48:07 GMT</pubDate><category>CVE</category></item><item><title>MongoDB Rust driver may issue unintended commands</title><link>https://agentprime.io/advisories/GHSA-32jf-h775-g29h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-32jf-h775-g29h/</guid><description>mongodb &gt;=2.0.0, &lt;2.8.2, fixed in 2.8.2. CVSS 6.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jul 2024 21:32:16 GMT</pubDate><category>crates.io</category><category>mongodb</category></item><item><title>CVE-2024-22815: An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) via crafted commands.</title><link>https://agentprime.io/advisories/CVE-2024-22815/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22815/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-22809: Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code&apos;s shared folder and view sensitive information.</title><link>https://agentprime.io/advisories/CVE-2024-22809/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22809/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21612: Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE</title><link>https://agentprime.io/advisories/CVE-2024-21612/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21612/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jan 2024 00:55:37 GMT</pubDate><category>CVE</category></item><item><title>BER/CER/DER decoder panics on invalid input</title><link>https://agentprime.io/advisories/GHSA-6jmw-6mxw-w4jc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6jmw-6mxw-w4jc/</guid><description>bcder &lt;0.7.3, fixed in 0.7.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Sep 2023 15:31:14 GMT</pubDate><category>crates.io</category><category>bcder</category></item><item><title>CVE-2021-38443: Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure</title><link>https://agentprime.io/advisories/CVE-2021-38443/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-38443/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 May 2022 15:16:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-36199: VideoEdge</title><link>https://agentprime.io/advisories/CVE-2021-36199/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-36199/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Jan 2022 19:10:42 GMT</pubDate><category>CVE</category></item><item><title>Critical security issues in XML encoding in github.com/dexidp/dex</title><link>https://agentprime.io/advisories/GHSA-m9hp-7r99-94h5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-m9hp-7r99-94h5/</guid><description>github.com/dexidp/dex &lt;2.27.0, fixed in 2.27.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Dec 2021 17:53:53 GMT</pubDate><category>Go</category><category>github.com/dexidp/dex</category><category>github.com/russellhaering/goxmldsig</category><category>critical</category></item><item><title>CVE-2018-5381: Quagga bgpd: The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of…</title><link>https://agentprime.io/advisories/CVE-2018-5381/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-5381/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Feb 2018 13:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>