# CWE-248.

Every Advisory and CVE whose sources give the weakness CWE-248, newest first.

## Records, newest first (an older page)

- [dd-trace-cpp malformed unicode header values may cause crash](https://agentprime.io/advisories/CVE-2024-38525.md)
  `CVE-2024-38525` · CVE record: DataDog dd-trace-cpp · CVSS 7.5 High · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-20, CWE-248
- [Panic when parsing invalid palette-color images in golang.org/x/image](https://agentprime.io/advisories/GHSA-9phm-fm57-rhg8.md)
  `GHSA-9phm-fm57-rhg8`, `CVE-2024-24792`, `GO-2024-2937` · Go `golang.org/x/image`: affected `<0.18.0`, fixed in `0.18.0` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2024 · Tags: CWE-248
- [Unauthenticated DoS](https://agentprime.io/advisories/CVE-2023-5038.md)
  `CVE-2023-5038` · CVE record: Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera · CVSS 8.7 High · Not analysed yet · Published 25 Jun 2024 · Tags: CWE-248, CWE-703
- [@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling](https://agentprime.io/advisories/GHSA-pm9q-xj9p-96pm.md)
  `GHSA-pm9q-xj9p-96pm`, `CVE-2024-31217` · npm `@strapi/plugin-upload`: affected `<4.22.0`, fixed in `4.22.0` · CVSS 5.3 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: CWE-248
- [Envoy can crash due to uncaught nlohmann JSON exception](https://agentprime.io/advisories/CVE-2024-34363.md)
  `CVE-2024-34363` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2024 · Tags: CWE-248
- [IBM App Connect Enterprise denial of service](https://agentprime.io/advisories/CVE-2024-31904.md)
  `CVE-2024-31904` · CVE record: IBM App Connect Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 22 May 2024 · Tags: CWE-248
- [Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…: Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…](https://agentprime.io/advisories/CVE-2021-33145.md)
  `CVE-2021-33145` · CVE record: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware · CVSS 7.2 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-248
- [Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-32995.md)
  `CVE-2024-32995` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-248
- [Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-3052.md)
  `CVE-2024-3052` · CVE record: silabs.com Z/IP Gateway SDK · CVSS 7.5 High · Not analysed yet · Published 26 Apr 2024 · Tags: CWE-248
- [Z/IP Gateway Device Reset Locally Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-3051.md)
  `CVE-2024-3051` · CVE record: silabs.com Z/IP Gateway SDK · CVSS 7.5 High · Not analysed yet · Published 26 Apr 2024 · Tags: CWE-248, CWE-419
- [In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.](https://agentprime.io/advisories/CVE-2023-52342.md)
  `CVE-2023-52342` · CVE record: Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000 · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-248
- [In flashc, there is a possible information disclosure due to an uncaught exception.](https://agentprime.io/advisories/CVE-2024-20049.md)
  `CVE-2024-20049` · CVE record: MediaTek, Inc. MT2713, MT2737, MT6781, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798 · CVSS 4.4 Medium · Not analysed yet · Published 1 Apr 2024 · Tags: CWE-248
- [In flashc, there is a possible information disclosure due to an uncaught exception.](https://agentprime.io/advisories/CVE-2024-20048.md)
  `CVE-2024-20048` · CVE record: MediaTek, Inc. MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798 · CVSS 6.2 Medium · Not analysed yet · Published 1 Apr 2024 · Tags: CWE-248
- [Elasticsearch Uncaught Exception leading to crash](https://agentprime.io/advisories/GHSA-pw39-f3m5-cxfc.md)
  `GHSA-pw39-f3m5-cxfc`, `BIT-elasticsearch-2024-23449`, `CVE-2024-23449` · Maven `org.elasticsearch:elasticsearch`: affected `>=8.4.0, <8.11.1`, fixed in `8.11.1` · CVSS 4.3 Medium · Not analysed yet · Published 29 Mar 2024 · Tags: CWE-248
- [Cisco IOS: A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow…](https://agentprime.io/advisories/CVE-2024-20276.md)
  `CVE-2024-20276` · CVE record: Cisco IOS · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-248
- [Gnutls: potential crash during chain building/verification](https://agentprime.io/advisories/CVE-2024-28835.md)
  `CVE-2024-28835` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: CWE-248
- [Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet](https://agentprime.io/advisories/CVE-2023-3966.md)
  `CVE-2023-3966` · CVE record: openvswitch and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2024 · Tags: CWE-248
- [Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-6640.md)
  `CVE-2023-6640` · CVE record: silabs.com PC Controller · CVSS 6.5 Medium · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-248
- [Silicon Labs PC Controller Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-6533.md)
  `CVE-2023-6533` · CVE record: silabs.com PC Controller · CVSS 6.5 Medium · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-248, CWE-419
- [Uncaught Exception in Macro Expecting Native Function to Exist](https://agentprime.io/advisories/GHSA-6wr5-jmpr-mjcx.md)
  `GHSA-6wr5-jmpr-mjcx`, `CVE-2024-58365` · crates.io `surrealdb`: affected `<1.2.0`, fixed in `1.2.0` · CVSS 7.1 High · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-248
- [Uncaught Exception Handling Parsing Errors on Line Terminators](https://agentprime.io/advisories/GHSA-8xff-473h-f863.md)
  `GHSA-8xff-473h-f863`, `CVE-2024-58364` · crates.io `surrealdb`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 7.1 High · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-248
- [Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)](https://agentprime.io/advisories/CVE-2024-21983.md)
  `CVE-2024-21983` · CVE record: NetApp StorageGRID · CVSS 6.5 Medium · Not analysed yet · Published 16 Feb 2024 · Tags: CWE-248
- [Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…](https://agentprime.io/advisories/CVE-2023-26586.md)
  `CVE-2023-26586` · CVE record: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-248
- [Envoy crashes when using an address type that isn’t supported by the OS](https://agentprime.io/advisories/CVE-2024-23325.md)
  `CVE-2024-23325` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2024 · Tags: CWE-248, CWE-755
- [Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)](https://agentprime.io/advisories/CVE-2023-27318.md)
  `CVE-2023-27318` · CVE record: NetApp StorageGRID (formerly StorageGRID Webscale) · CVSS 6.5 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: CWE-248
- [Some WASM source files could have caused a crash when loaded in devtools.](https://agentprime.io/advisories/CVE-2024-0754.md)
  `CVE-2024-0754` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: CWE-248
- [Uncaught Exception processing HTTP Headers in SurrealDB](https://agentprime.io/advisories/GHSA-m24x-r6q3-2vp9.md)
  `GHSA-m24x-r6q3-2vp9`, `CVE-2024-58368` · crates.io `surrealdb`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 8.7 High · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-248
- [Uncaught Exception in surrealdb](https://agentprime.io/advisories/GHSA-jm4v-58r5-66hj.md)
  `GHSA-jm4v-58r5-66hj`, `CVE-2024-58369` · crates.io `surrealdb`: affected `<1.1.1`, fixed in `1.1.1` · CVSS 7.1 High · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-248
- [Z-Wave Denial of Service caused by Stream of Packets](https://agentprime.io/advisories/CVE-2023-5310.md)
  `CVE-2023-5310` · CVE record: silabs.com Gecko SDK · CVSS 5.7 Medium · Not analysed yet · Published 15 Dec 2023 · Tags: CWE-248
- [Intel Unison software: Uncaught exception for some Intel Unison software may allow an authenticated user to…](https://agentprime.io/advisories/CVE-2023-22290.md)
  `CVE-2023-22290` · CVE record: Intel Unison software · CVSS 6.5 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-248
- [Intel Unison software: Uncaught exception for some Intel Unison software may allow an authenticated user to…](https://agentprime.io/advisories/CVE-2023-22292.md)
  `CVE-2023-22292` · CVE record: Intel Unison software · CVSS 7.3 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-248
- [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software…](https://agentprime.io/advisories/CVE-2023-20086.md)
  `CVE-2023-20086` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-248
- [quic-go vulnerable to pointer dereference that can lead to panic](https://agentprime.io/advisories/GHSA-3q6m-v84f-6p9h.md)
  `GHSA-3q6m-v84f-6p9h`, `CVE-2023-46239`, `GO-2023-2160` · Go `github.com/quic-go/quic-go`: affected `>=0.37.0, <0.37.3`, fixed in `0.37.3` · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2023 · Tags: Memory corruption, CWE-248
- [stellar-strkey vulnerable to panic in SignedPayload::from_payload](https://agentprime.io/advisories/GHSA-5873-6fwq-463f.md)
  `GHSA-5873-6fwq-463f`, `CVE-2023-46135` · crates.io `stellar-strkey`: affected `<0.0.8`, fixed in `0.0.8` · CVSS 5.3 Medium · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-248
- [NVIDIA Cumulus Linux: NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an…](https://agentprime.io/advisories/CVE-2023-25526.md)
  `CVE-2023-25526` · CVE record: NVIDIA Cumulus Linux · CVSS 6.5 Medium · Not analysed yet · Published 20 Sept 2023 · Tags: CWE-248
- [phonenumber: panic on parsing crafted RF3966 phonenumber inputs](https://agentprime.io/advisories/GHSA-whhr-7f2w-qqj2.md)
  `GHSA-whhr-7f2w-qqj2`, `CVE-2023-42444`, `RUSTSEC-2023-0082` · crates.io `phonenumber`: affected `>=0.0.0-0, <0.2.5 || >=0.3.0, <0.3.3`, fixed in `0.2.5`, `0.3.3` · CVSS 8.6 High · Not analysed yet · Published 19 Sept 2023 · Tags: CWE-248, CWE-392, CWE-1284
- [blurhash: panic on parsing crafted blurhash inputs](https://agentprime.io/advisories/GHSA-cxvp-82cq-57h2.md)
  `GHSA-cxvp-82cq-57h2`, `CVE-2023-42447`, `RUSTSEC-2023-0083` · crates.io `blurhash`: affected `>=0.0.0-0, <0.2.0`, fixed in `0.2.0` · CVSS 8.6 High · Not analysed yet · Published 19 Sept 2023 · Tags: CWE-248, CWE-392, CWE-1284
- [Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)](https://agentprime.io/advisories/GHSA-p25m-jpj4-qcrr.md)
  `GHSA-p25m-jpj4-qcrr`, `CVE-2023-4785`, `PYSEC-2026-1428` · PyPI `grpcio` and 1 more: affected `>=1.53.0, <1.53.2 || >=1.54.0, <1.54.3 || >=1.55.0, <1.55.3`, fixed in `1.53.2`, `1.54.3`, `1.55.3` · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-248
- [Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception.](https://agentprime.io/advisories/CVE-2023-23774.md)
  `CVE-2023-23774` · CVE record: Motorola EBTS/MBTS Base Radio · CVSS 8.4 High · Not analysed yet · Published 29 Aug 2023 · Tags: CWE-248
- [Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds](https://agentprime.io/advisories/CVE-2023-39948.md)
  `CVE-2023-39948` · CVE record: eProsima Fast-DDS · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-248
- [Malformed serialized data in a data submessage leads to unhandled exception](https://agentprime.io/advisories/CVE-2023-39945.md)
  `CVE-2023-39945` · CVE record: eProsima Fast-DDS · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-248
- [Vault Enterprise Namespace Creation May Lead to Denial of Service](https://agentprime.io/advisories/CVE-2023-3774.md)
  `CVE-2023-3774` · CVE record: HashiCorp Vault Enterprise · CVSS 4.9 Medium · Not analysed yet · Published 28 Jul 2023 · Tags: CWE-248
- [DoS vulnerability for apps with sockets enabled](https://agentprime.io/advisories/GHSA-gpw9-fwm8-7rx7.md)
  `GHSA-gpw9-fwm8-7rx7`, `CVE-2023-38504` · npm `sails`: affected `<1.5.7`, fixed in `1.5.7` · CVSS 7.5 High · Not analysed yet · Published 27 Jul 2023 · Tags: CWE-248
- [Vulnerability of failures to capture exceptions in the communication framework.](https://agentprime.io/advisories/CVE-2023-1691.md)
  `CVE-2023-1691` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-248
- [Denial of service condition in M-Files Server](https://agentprime.io/advisories/CVE-2023-3405.md)
  `CVE-2023-3405` · CVE record: M-Files M-Files Server · CVSS 7.5 High · Not analysed yet · Published 27 Jun 2023 · Tags: CWE-248
- [engine.io Uncaught Exception vulnerability](https://agentprime.io/advisories/GHSA-q9mw-68c2-j6m5.md)
  `GHSA-q9mw-68c2-j6m5`, `CVE-2023-31125` · npm `engine.io`: affected `>=5.1.0, <6.4.2`, fixed in `6.4.2` · CVSS 6.5 Medium · Not analysed yet · Published 3 May 2023 · Tags: CWE-248
- [Uncaught Exception in yaml](https://agentprime.io/advisories/GHSA-f9xv-q969-pqx4.md)
  `GHSA-f9xv-q969-pqx4`, `CVE-2023-2251` · npm `yaml`: affected `>=2.0.0-5, <2.2.2`, fixed in `2.2.2` · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2023 · Tags: CWE-248
- [XWiki Platform vulnerable to page render failure due to broken translations](https://agentprime.io/advisories/GHSA-9jq5-xwqw-q8j3.md)
  `GHSA-9jq5-xwqw-q8j3`, `CVE-2023-29520` · Maven `org.xwiki.platform:xwiki-platform-localization-source-wiki`: affected `>=4.3-milestone-2, <13.10.11 || >=14.0-rc-1, <14.4.8 || >=14.5, <14.10.1`, fixed in `13.10.11`, `14.4.8`, `14.10.1` · CVSS 4.3 Medium · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-248, CWE-755
- [In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop.](https://agentprime.io/advisories/CVE-2023-21087.md)
  `CVE-2023-21087` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-248
- [In thermal, there is a possible memory corruption due to an uncaught exception.](https://agentprime.io/advisories/CVE-2023-20628.md)
  `CVE-2023-20628` · CVE record: MediaTek, Inc. MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8175, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 7 Mar 2023 · Tags: CWE-248
- [Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon](https://agentprime.io/advisories/CVE-2023-22941.md)
  `CVE-2023-22941` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Feb 2023 · Tags: CWE-248
- [Uncaught Exception in thorsten/phpmyfaq](https://agentprime.io/advisories/GHSA-6vv4-qq3r-9rv8.md)
  `GHSA-6vv4-qq3r-9rv8`, `CVE-2023-0790`, `PKSA-47fw-kqzf-tzd9` · Packagist `thorsten/phpmyfaq`: affected `<3.1.11`, fixed in `3.1.11` · CVSS 7.6 High · Not analysed yet · Published 12 Feb 2023 · Tags: CWE-248
- [Specially crafted RTPS message may cause an OpenDDS application to crash](https://agentprime.io/advisories/CVE-2023-23932.md)
  `CVE-2023-23932` · CVE record: OpenDDS OpenDDS · CVSS 5.3 Medium · Not analysed yet · Published 3 Feb 2023 · Tags: CWE-248
- [Triggered crash on direct RRDP access](https://agentprime.io/advisories/CVE-2023-0158.md)
  `CVE-2023-0158` · CVE record: NLnet Labs Krill · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: CWE-248
- [mercurius has Uncaught Exception when using subscriptions](https://agentprime.io/advisories/GHSA-cm8h-q92v-xcfc.md)
  `GHSA-cm8h-q92v-xcfc`, `CVE-2023-22477` · npm `mercurius`: affected `<8.13.2 || >=9.0.0, <11.5.0`, fixed in `8.13.2`, `11.5.0` · CVSS 5.3 Medium · Not analysed yet · Published 9 Jan 2023 · Tags: CWE-248
- [In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes.](https://agentprime.io/advisories/CVE-2022-38166.md)
  `CVE-2022-38166` · CVE record · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2022 · Tags: CWE-248
- [A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create erro...](https://agentprime.io/advisories/GHSA-hff2-x2j9-gxgv.md)
  `GHSA-hff2-x2j9-gxgv`, `CVE-2022-3500`, `PYSEC-2022-42995` · PyPI `keylime`: affected `<6.5.1`, fixed in `6.5.1` · CVSS 5.1 Medium · Not analysed yet · Published 22 Nov 2022 · Tags: CWE-248
- [Uncaught exception in engine.io](https://agentprime.io/advisories/GHSA-r7qp-cfhv-p84w.md)
  `GHSA-r7qp-cfhv-p84w`, `CVE-2022-41940` · npm `engine.io`: affected `<3.6.1 || >=4.0.0, <6.2.1`, fixed in `3.6.1`, `6.2.1` · CVSS 7.1 High · Not analysed yet · Published 21 Nov 2022 · Tags: CWE-248
- [fastify/websocket vulnerable to uncaught exception via crash on malformed packet](https://agentprime.io/advisories/GHSA-4pcg-wr6c-h9cq.md)
  `GHSA-4pcg-wr6c-h9cq`, `CVE-2022-39386` · npm `@fastify/websocket` and 1 more: affected `>=5.0.0, <5.0.1 || >=6.0.0, <7.1.1`, fixed in `5.0.1`, `7.1.1` · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2022 · Tags: CWE-248
- [Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20919.md)
  `CVE-2022-20919` · CVE record: Cisco Cisco IOS · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-248

Newest: <https://agentprime.io/advisories/tag/cwe-248.md>
Older: <https://agentprime.io/advisories/tag/cwe-248.md?cursor=WyIyMDIyLTA5LTMwVDE4OjQ2OjM3LjQ4MTAwMFoiLCJDVkUtMjAyMi0yMDkxOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-248&cursor=WyIyMDI0LTA4LTA4VDA5OjMwOjE4LjQyODAwMFoiLCJDVkUtMjAyNC00MjAzNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-248/?cursor=WyIyMDI0LTA4LTA4VDA5OjMwOjE4LjQyODAwMFoiLCJDVkUtMjAyNC00MjAzNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.