agentprime: CWE-248Every new CWE-248 Advisory and CVE.https://agentprime.io/CVE-2026-122315: Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panichttps://agentprime.io/advisories/CVE-2026-122315/https://agentprime.io/advisories/CVE-2026-122315/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:16 GMTCVECVE-2026-122314: Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panichttps://agentprime.io/advisories/CVE-2026-122314/https://agentprime.io/advisories/CVE-2026-122314/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:15 GMTCVECVE-2026-76892: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP processhttps://agentprime.io/advisories/CVE-2026-76892/https://agentprime.io/advisories/CVE-2026-76892/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:14:13 GMTCVECVE-2026-121443: svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Taghttps://agentprime.io/advisories/CVE-2026-121443/https://agentprime.io/advisories/CVE-2026-121443/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:33 GMTCVECVE-2026-121414: Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Updatehttps://agentprime.io/advisories/CVE-2026-121414/https://agentprime.io/advisories/CVE-2026-121414/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:13 GMTCVECVE-2026-121386: FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readershttps://agentprime.io/advisories/CVE-2026-121386/https://agentprime.io/advisories/CVE-2026-121386/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:27:53 GMTCVECVE-2026-59004: In multiple locations, there is a possible permission bypass due to an uncaught exception.https://agentprime.io/advisories/CVE-2026-59004/https://agentprime.io/advisories/CVE-2026-59004/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 19:54:52 GMTCVECVE-2026-55288: In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception.https://agentprime.io/advisories/CVE-2026-55288/https://agentprime.io/advisories/CVE-2026-55288/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 19:53:32 GMTCVECVE-2026-120216: fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responseshttps://agentprime.io/advisories/CVE-2026-120216/https://agentprime.io/advisories/CVE-2026-120216/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 11:08:00 GMTCVECVE-2026-120215: @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hookhttps://agentprime.io/advisories/CVE-2026-120215/https://agentprime.io/advisories/CVE-2026-120215/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 10:20:47 GMTCVECVE-2026-101175: Null pointer dereference vulnerability in the ArkWeb module.https://agentprime.io/advisories/CVE-2026-101175/https://agentprime.io/advisories/CVE-2026-101175/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 06:27:22 GMTCVEForge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messagehttps://agentprime.io/advisories/GHSA-8hrf-8g6f-7xwp/https://agentprime.io/advisories/GHSA-8hrf-8g6f-7xwp/node-forge <1.4.1, fixed in 1.4.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Oct 2026 23:02:00 GMTnpmnode-forgeCVE-2026-63341: Aedes has Uncaught Exception and Uncontrolled Resource Consumptionhttps://agentprime.io/advisories/CVE-2026-63341/https://agentprime.io/advisories/CVE-2026-63341/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 22:09:50 GMTCVECVE-2026-119052: llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Lengthhttps://agentprime.io/advisories/CVE-2026-119052/https://agentprime.io/advisories/CVE-2026-119052/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 13:08:52 GMTCVEundici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiationhttps://agentprime.io/advisories/GHSA-qrxm-fqhp-jwvm/https://agentprime.io/advisories/GHSA-qrxm-fqhp-jwvm/undici >=4.2.1, <6.29.1 || >=7.0.0, <7.30.1 || >=8.0.0, <8.12.2, fixed in 6.29.1, 7.30.1, 8.12.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 19:02:21 GMTnpmundiciundici vulnerable to Denial of Service via unhandled exception in the decompress interceptorhttps://agentprime.io/advisories/GHSA-55wc-3pg8-jfw6/https://agentprime.io/advisories/GHSA-55wc-3pg8-jfw6/undici >=7.15.0, <7.30.1 || >=8.0.0, <8.12.2, fixed in 7.30.1, 8.12.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 19:02:10 GMTnpmundiciqs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)https://agentprime.io/advisories/GHSA-6pq8-jhm2-2vcw/https://agentprime.io/advisories/GHSA-6pq8-jhm2-2vcw/qs >=6.7.0, <6.16.1, fixed in 6.16.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:10:55 GMTnpmqsundici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshakehttps://agentprime.io/advisories/GHSA-qq8j-7v2v-3rwp/https://agentprime.io/advisories/GHSA-qq8j-7v2v-3rwp/undici >=8.11.0, <8.11.2, fixed in 8.11.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:09:45 GMTnpmundiciCVE-2026-111107: Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Servicehttps://agentprime.io/advisories/CVE-2026-111107/https://agentprime.io/advisories/CVE-2026-111107/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 15:52:27 GMTCVEDatadog dd-trace-py: IAST instrumentation can lead to application DOShttps://agentprime.io/advisories/GHSA-p3m5-h5v9-vqj6/https://agentprime.io/advisories/GHSA-p3m5-h5v9-vqj6/ddtrace >=3.13.0, <4.15.5, fixed in 4.15.5. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 15:37:24 GMTPyPIddtraceCVE-2026-117541: svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()https://agentprime.io/advisories/CVE-2026-117541/https://agentprime.io/advisories/CVE-2026-117541/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:59:34 GMTCVEundici vulnerable to Denial of Service via unhandled error on excessive content-encodingshttps://agentprime.io/advisories/GHSA-xjj6-f33q-929c/https://agentprime.io/advisories/GHSA-xjj6-f33q-929c/undici >=6.23.0, <6.29.1 || >=7.18.0, <7.30.1 || >=8.0.0, <8.12.2, fixed in 6.29.1, 7.30.1, 8.12.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 23 Oct 2026 22:14:31 GMTnpmundicimulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownhttps://agentprime.io/advisories/GHSA-q7qp-rjg7-q26m/https://agentprime.io/advisories/GHSA-q7qp-rjg7-q26m/multer >=2.0.0, <2.5.0, fixed in 2.5.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 23 Oct 2026 22:08:22 GMTnpmmulterbody-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhttps://agentprime.io/advisories/GHSA-27r3-jxmh-p828/https://agentprime.io/advisories/GHSA-27r3-jxmh-p828/body-parser <1.20.9 || >=2.0.0, <2.4.0, fixed in 1.20.9, 2.4.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 23 Oct 2026 20:53:11 GMTnpmbody-parserCVE-2026-89318: JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)https://agentprime.io/advisories/CVE-2026-89318/https://agentprime.io/advisories/CVE-2026-89318/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:51:55 GMTCVECVE-2026-89316: LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertionhttps://agentprime.io/advisories/CVE-2026-89316/https://agentprime.io/advisories/CVE-2026-89316/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:48:08 GMTCVECVE-2026-89315: JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffixhttps://agentprime.io/advisories/CVE-2026-89315/https://agentprime.io/advisories/CVE-2026-89315/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:46:30 GMTCVECVE-2026-89312: AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IVhttps://agentprime.io/advisories/CVE-2026-89312/https://agentprime.io/advisories/CVE-2026-89312/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:36:53 GMTCVECVE-2026-76493: Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-76493/https://agentprime.io/advisories/CVE-2026-76493/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 16:17:34 GMTCVECVE-2026-82231: Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift clienthttps://agentprime.io/advisories/CVE-2026-82231/https://agentprime.io/advisories/CVE-2026-82231/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:04:19 GMTCVECVE-2026-114051: vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generatehttps://agentprime.io/advisories/CVE-2026-114051/https://agentprime.io/advisories/CVE-2026-114051/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:28 GMTCVEPanic lowering a host-created component model stream into a guest that expects a different payload typehttps://agentprime.io/advisories/GHSA-9pvw-hwfg-92h5/https://agentprime.io/advisories/GHSA-9pvw-hwfg-92h5/wasmtime >=46.0.0, <48.0.7 || >=49.0.0, <49.0.4, fixed in 48.0.7, 49.0.4. CVSS 5.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 19 Oct 2026 12:00:00 GMTcrates.iowasmtimeCVE-2026-105661: Gitea panic on the repositories route of individual usershttps://agentprime.io/advisories/CVE-2026-105661/https://agentprime.io/advisories/CVE-2026-105661/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:56:41 GMTCVECoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginhttps://agentprime.io/advisories/GHSA-74w3-63xv-x9mv/https://agentprime.io/advisories/GHSA-74w3-63xv-x9mv/github.com/coredns/coredns >=1.9.4, <1.14.5, fixed in 1.14.5. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:26:42 GMTGogithub.com/coredns/corednsCVE-2026-42270: countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exceptionhttps://agentprime.io/advisories/CVE-2026-42270/https://agentprime.io/advisories/CVE-2026-42270/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:02:00 GMTCVEQwik: Crashing any Qwik Server via Resource thenablehttps://agentprime.io/advisories/GHSA-x586-xvc8-g7q6/https://agentprime.io/advisories/GHSA-x586-xvc8-g7q6/@builder.io/qwik <1.20.0, fixed in 1.20.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 15 Oct 2026 20:22:00 GMTnpm@builder.io/qwik@qwik.dev/corekin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static pathhttps://agentprime.io/advisories/GHSA-fh4f-47mf-f2gj/https://agentprime.io/advisories/GHSA-fh4f-47mf-f2gj/github.com/getkin/kin-openapi <0.145.0, fixed in 0.145.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 15 Oct 2026 20:15:48 GMTGogithub.com/getkin/kin-openapikin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing itemshttps://agentprime.io/advisories/GHSA-p6wj-qrr4-pgh5/https://agentprime.io/advisories/GHSA-p6wj-qrr4-pgh5/github.com/getkin/kin-openapi >=0.136.0, <0.143.0, fixed in 0.143.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 15 Oct 2026 20:14:54 GMTGogithub.com/getkin/kin-openapiCVE-2026-103936: libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listenershttps://agentprime.io/advisories/CVE-2026-103936/https://agentprime.io/advisories/CVE-2026-103936/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 17:28:32 GMTCVECVE-2026-79833: HPE NonStop ANSI SQLUTIL - Denial of Service vulnerabilityhttps://agentprime.io/advisories/CVE-2026-79833/https://agentprime.io/advisories/CVE-2026-79833/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 11:04:27 GMTCVECVE-2026-110933: Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.https://agentprime.io/advisories/CVE-2026-110933/https://agentprime.io/advisories/CVE-2026-110933/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 06:51:04 GMTCVECVE-2026-110854: Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Errorhttps://agentprime.io/advisories/CVE-2026-110854/https://agentprime.io/advisories/CVE-2026-110854/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:32 GMTCVECVE-2026-67418: RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribershttps://agentprime.io/advisories/CVE-2026-67418/https://agentprime.io/advisories/CVE-2026-67418/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:07:29 GMTCVECVE-2026-67416: RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validationhttps://agentprime.io/advisories/CVE-2026-67416/https://agentprime.io/advisories/CVE-2026-67416/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:00:32 GMTCVECVE-2026-96945: Windows Failover Cluster Denial of Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-96945/https://agentprime.io/advisories/CVE-2026-96945/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:01:26 GMTCVECVE-2026-88099: Windows Failover Cluster Denial of Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-88099/https://agentprime.io/advisories/CVE-2026-88099/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:00:20 GMTCVECVE-2026-70082: Windows DNS Denial of Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-70082/https://agentprime.io/advisories/CVE-2026-70082/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:59:37 GMTCVECVE-2026-106170: Fortinet FortiSandbox: An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox…https://agentprime.io/advisories/CVE-2026-106170/https://agentprime.io/advisories/CVE-2026-106170/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:37:10 GMTCVECVE-2026-109338: SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Valueshttps://agentprime.io/advisories/CVE-2026-109338/https://agentprime.io/advisories/CVE-2026-109338/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:25 GMTCVECVE-2026-109301: Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URLhttps://agentprime.io/advisories/CVE-2026-109301/https://agentprime.io/advisories/CVE-2026-109301/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:04:58 GMTCVE