# CWE-252.

Every Advisory and CVE whose sources give the weakness CWE-252, newest first.

## Records, newest first

- [Excessive memory allocation when decompressing crafted streams in github.com/andybalholm/brotli](https://agentprime.io/advisories/GHSA-9v8h-qqgm-4m35.md)
  `GHSA-9v8h-qqgm-4m35`, `BIT-brotli-2026-111497`, `BIT-dotnet-2026-111497`, `BIT-dotnet-sdk-2026-111497`, `BIT-node-2026-111497`, `BIT-node-min-2026-111497`, `BIT-powershell-2026-111497`, `CVE-2026-111497`, `GHSA-c9gr-gmg4-2vqv`, `GO-2026-6888`, `PYSEC-2026-4322`, `PYSEC-2026-4323` · Go `github.com/andybalholm/brotli`: affected `<1.2.7`, fixed in `1.2.7` · CVSS 9.2 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.83 · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-252
- [WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-121639.md)
  `CVE-2026-121639` · CVE record: WatchGuard AuthPoint Authentication Gateway · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass, CWE-252
- [NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full](https://agentprime.io/advisories/CVE-2026-115403.md)
  `CVE-2026-115403` · CVE record: Eclipse Foundation Eclipse ThreadX · CVSS 8.2 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption, CWE-252
- [NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full](https://agentprime.io/advisories/CVE-2026-114408.md)
  `CVE-2026-114408` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption, CWE-252
- [Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests](https://agentprime.io/advisories/GHSA-x9ff-22gv-65f4.md)
  `GHSA-x9ff-22gv-65f4`, `CVE-2026-118263`, `GO-2026-6844` · Go `github.com/labstack/echo/v5`: affected `>=5.0.0, <5.4.1`, fixed in `5.4.1` · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-252
- [Unchecked return value in HAProxy and others](https://agentprime.io/advisories/CVE-2026-110353.md)
  `CVE-2026-110353` · CVE record: HAProxy HAProxy and 3 more · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-252
- [Apache bRPC: Out-of-Bounds Write in Redis Command Parser](https://agentprime.io/advisories/CVE-2026-56388.md)
  `CVE-2026-56388` · CVE record: Apache Software Foundation Apache bRPC · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service, Memory corruption, CWE-252
- [libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS](https://agentprime.io/advisories/CVE-2026-48741.md)
  `CVE-2026-48741` · CVE record: mz-automation libiec61850 · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption, CWE-129, CWE-252, CWE-754
- [libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead](https://agentprime.io/advisories/CVE-2026-48503.md)
  `CVE-2026-48503` · CVE record: mz-automation libiec61850 · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption, Information disclosure, CWE-252
- [Null Pointer Dereference in PKCS#7 bundle with no certificates](https://agentprime.io/advisories/CVE-2026-77207.md)
  `CVE-2026-77207` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-252
- [RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion](https://agentprime.io/advisories/CVE-2026-107838.md)
  `CVE-2026-107838` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service, CWE-252
- [Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated](https://agentprime.io/advisories/CVE-2026-107785.md)
  `CVE-2026-107785` · CVE record: Sirius Computer, Inc. Crux Agent · CVSS 6.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-252, CWE-325, CWE-394
- [Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver](https://agentprime.io/advisories/CVE-2026-106436.md)
  `CVE-2026-106436` · CVE record: MongoDB PHP Driver · CVSS 6.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-252
- [SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18397.md)
  `CVE-2026-18397` · CVE record: Thales SConnect · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Weak cryptography or TLS, Memory corruption, CWE-130, CWE-252
- [undici vulnerable to Denial of Service via unrequested WebSocket subprotocol](https://agentprime.io/advisories/GHSA-rfgv-xxqx-mfg5.md)
  `GHSA-rfgv-xxqx-mfg5`, `CVE-2026-19534` · npm `undici`: affected `>=6.7.0, <6.28.1 || >=7.0.0, <7.29.1 || >=8.0.0, <8.10.2`, fixed in `6.28.1`, `7.29.1`, `8.10.2` · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-248, CWE-252
- [Unchecked return value in Google Chrome](https://agentprime.io/advisories/CVE-2026-95316.md)
  `CVE-2026-95316` · CVE record: Google Chrome · CVSS 2.9 Low · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-252
- [RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS](https://agentprime.io/advisories/CVE-2026-67409.md)
  `CVE-2026-67409` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-252
- [Unchecked return value in Dell Update Package Framework](https://agentprime.io/advisories/CVE-2026-71180.md)
  `CVE-2026-71180` · CVE record: Dell Update Package Framework · CVSS 8.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-252
- [Unchecked return value in WebAssembly wabt](https://agentprime.io/advisories/CVE-2026-90648.md)
  `CVE-2026-90648` · CVE record: WebAssembly wabt · CVSS 7.1 High · Not analysed yet · Published 12 Sept 2026 · Tags: CWE-252
- [snipe-it before 8.7.0 Data Loss via Failed Image Write](https://agentprime.io/advisories/CVE-2026-86749.md)
  `CVE-2026-86749` · CVE record: grokability snipe-it · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-252
- [Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence](https://agentprime.io/advisories/CVE-2026-86739.md)
  `CVE-2026-86739` · CVE record: grokability snipe-it · CVSS 2.3 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-252
- [Unchecked return value in xmlsoft libxml2](https://agentprime.io/advisories/CVE-2026-86141.md)
  `CVE-2026-86141` · CVE record: xmlsoft libxml2 · CVSS 2.9 Low · Not analysed yet · Published 5 Sept 2026 · Tags: CWE-252
- [Unchecked return value in chewkeanho software-actualizer](https://agentprime.io/advisories/CVE-2026-85649.md)
  `CVE-2026-85649` · CVE record: chewkeanho software-actualizer · CVSS 7.9 High · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-252, CWE-636
- [FIPS mode assertion failure via malicious CERT payload](https://agentprime.io/advisories/CVE-2026-14957.md)
  `CVE-2026-14957` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2026 · Tags: Denial of service, CWE-252
- [rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres](https://agentprime.io/advisories/GHSA-6fqq-j9c4-5766.md)
  `GHSA-6fqq-j9c4-5766`, `CVE-2026-78699`, `EEF-CVE-2026-78699` · Hex `ash_postgres`: affected `>=0.25.0, <2.13.0`, fixed in `2.13.0` · CVSS 7.2 High · Not analysed yet · Published 30 Aug 2026 · Tags: CWE-252
- [Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute](https://agentprime.io/advisories/GHSA-xqqh-3w52-q8p7.md)
  `GHSA-xqqh-3w52-q8p7` · RubyGems `nokogiri`: affected `>=1.5.1`, no fixed version yet · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-252
- [Unchecked return value in Tor](https://agentprime.io/advisories/CVE-2026-77641.md)
  `CVE-2026-77641` · CVE record: torproject Tor · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-252
- [MyBB: Buddy list corruption](https://agentprime.io/advisories/CVE-2026-47245.md)
  `CVE-2026-47245` · CVE record: mybb mybb · CVSS 4.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-252
- [Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-9mr8-pwpw-3j2w.md)
  `GHSA-9mr8-pwpw-3j2w`, `BIT-dotnet-2026-62909`, `BIT-dotnet-sdk-2026-62909`, `CVE-2026-62909` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-248, CWE-252
- [ImageMagick: Heap-use-after-free via XMP profile could result in a crash](https://agentprime.io/advisories/GHSA-qh5g-q395-cx4j.md)
  `GHSA-qh5g-q395-cx4j`, `CVE-2026-61857` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service, Memory corruption, CWE-252, CWE-703
- [Unchecked return value in HAProxy](https://agentprime.io/advisories/CVE-2026-26080.md)
  `CVE-2026-26080` · CVE record: HAProxy HAProxy · CVSS 3.7 Low · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-252
- [chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)](https://agentprime.io/advisories/GHSA-4x34-chg5-mwjj.md)
  `GHSA-4x34-chg5-mwjj`, `CVE-2026-35339` · crates.io `uu_chmod`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 5.5 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-252, CWE-253, CWE-755
- [tarfile opened in streaming mode mishandles EOF](https://agentprime.io/advisories/CVE-2026-11972.md)
  `CVE-2026-11972` · CVE record: Python Software Foundation CPython · CVSS 8.2 High · Not analysed yet · Published 23 Jun 2026 · Tags: Denial of service, CWE-252, CWE-606
- [ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression](https://agentprime.io/advisories/GHSA-jcqp-6r6f-3mfx.md)
  `GHSA-jcqp-6r6f-3mfx`, `CVE-2026-46521` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.5 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, Denial of service, CWE-252
- [nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT](https://agentprime.io/advisories/GHSA-27w2-87xv-37c6.md)
  `GHSA-27w2-87xv-37c6`, `CVE-2026-40092` · crates.io `nimiq-keys`: affected `<=0.2.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 15 May 2026 · Tags: CWE-252
- [Unchecked return value in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed… and others](https://agentprime.io/advisories/CVE-2025-29938.md)
  `CVE-2025-29938` · CVE record: AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") and 3 more · CVSS 7.1 High · Not analysed yet · Published 15 May 2026 · Tags: CWE-252
- [Unchecked return value in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed… and others](https://agentprime.io/advisories/CVE-2025-0028.md)
  `CVE-2025-0028` · CVE record: AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") and 4 more · CVSS 8.3 High · Not analysed yet · Published 15 May 2026 · Tags: CWE-252
- [BIG-IP Advanced WAF and ASM vulnerability](https://agentprime.io/advisories/CVE-2026-40060.md)
  `CVE-2026-40060` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-252
- [Unchecked return value in Intel(R) QAT software drivers for Windows](https://agentprime.io/advisories/CVE-2026-20793.md)
  `CVE-2026-20793` · CVE record: Intel(R) QAT software drivers for Windows · CVSS 4.8 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-252
- [nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals](https://agentprime.io/advisories/GHSA-7c4j-2m43-2mgh.md)
  `GHSA-7c4j-2m43-2mgh`, `CVE-2026-34065` · crates.io `nimiq-primitives`: affected `<=0.2.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-252, CWE-755
- [uutils coreutils has an Unchecked Return Value Issue](https://agentprime.io/advisories/GHSA-wh8p-h9hw-x2mc.md)
  `GHSA-wh8p-h9hw-x2mc`, `CVE-2026-35344` · crates.io `coreutils`: affected `<=0.8.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-252
- [nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index](https://agentprime.io/advisories/CVE-2026-35468.md)
  `CVE-2026-35468` · CVE record: nimiq core-rs-albatross · CVSS 5.3 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-252
- [FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS](https://agentprime.io/advisories/CVE-2026-33983.md)
  `CVE-2026-33983` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption, CWE-252
- [Withdrawn Advisory: Kirby CMS has Persistent DoS via Malformed Image Upload](https://agentprime.io/advisories/GHSA-cw7v-45wm-mcf2.md)
  `GHSA-cw7v-45wm-mcf2`, `CVE-2026-29905` · Packagist `getkirby/cms`: affected `<5.2.0-rc.1`, fixed in `5.2.0-rc.1` · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-20, CWE-252
- [ImageMagick has uninitialized pointer dereference in JBIG decoder](https://agentprime.io/advisories/GHSA-wj8w-pjxf-9g4f.md)
  `GHSA-wj8w-pjxf-9g4f`, `CVE-2026-28691` · NuGet `Magick.NET-Q16-AnyCPU` and 18 more: affected `<14.10.4`, fixed in `14.10.4` · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2026 · Tags: Memory corruption, CWE-252
- [sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest](https://agentprime.io/advisories/GHSA-mhg6-2q2v-9h2c.md)
  `GHSA-mhg6-2q2v-9h2c`, `CVE-2026-31830` · RubyGems `sigstore`: affected `<0.2.3`, fixed in `0.2.3` · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-252
- [Nokogiri does not check the return value from xmlC14NExecute](https://agentprime.io/advisories/GHSA-wx95-c6cv-8532.md)
  `GHSA-wx95-c6cv-8532`, `CVE-2026-79772` · RubyGems `nokogiri`: affected `>=1.5.1, <1.19.1`, fixed in `1.19.1` · CVSS 6.9 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-252
- [Unchecked Return Value in GitLab](https://agentprime.io/advisories/CVE-2026-0723.md)
  `CVE-2026-0723` · CVE record: GitLab GitLab · CVSS 7.4 High · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-252
- [Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash](https://agentprime.io/advisories/CVE-2026-21920.md)
  `CVE-2026-21920` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-252
- [Unchecked return value in Lenovo ThinkPad L13 Gen 6 BIOS and others](https://agentprime.io/advisories/CVE-2026-0421.md)
  `CVE-2026-0421` · CVE record: Lenovo ThinkPad L13 Gen 6 BIOS and 3 more · CVSS 7.0 High · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-252
- [iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp](https://agentprime.io/advisories/CVE-2026-22861.md)
  `CVE-2026-22861` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, CWE-130, CWE-252
- [iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp](https://agentprime.io/advisories/CVE-2026-22255.md)
  `CVE-2026-22255` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 8 Jan 2026 · Tags: CWE-20, CWE-130, CWE-252
- [iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp](https://agentprime.io/advisories/CVE-2026-22047.md)
  `CVE-2026-22047` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: CWE-20, CWE-130, CWE-252
- [iccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp](https://agentprime.io/advisories/CVE-2026-22046.md)
  `CVE-2026-22046` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-130, CWE-252
- [NULL Pointer Dereference in iccDEV XML Tag Parser](https://agentprime.io/advisories/CVE-2026-21502.md)
  `CVE-2026-21502` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252, CWE-690
- [NULL Pointer Dereference in iccDEV XML Calculator Parser](https://agentprime.io/advisories/CVE-2026-21498.md)
  `CVE-2026-21498` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252, CWE-690
- [NULL Pointer Dereference in iccDEV Signature Parser](https://agentprime.io/advisories/CVE-2026-21496.md)
  `CVE-2026-21496` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252, CWE-690
- [NULL Pointer Dereference in iccDEV Unknown Tag Parser](https://agentprime.io/advisories/CVE-2026-21497.md)
  `CVE-2026-21497` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-252
- [iccDEV ToneMap Writer has NULL Pointer Member Call](https://agentprime.io/advisories/CVE-2026-21492.md)
  `CVE-2026-21492` · CVE record: InternationalColorConsortium iccDEV · CVSS 5.5 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, CWE-252
- [Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils](https://agentprime.io/advisories/GHSA-m98w-cqp3-qcqr.md)
  `GHSA-m98w-cqp3-qcqr`, `CVE-2025-66565`, `GO-2025-4208` · Go `github.com/gofiber/utils` and 1 more: affected `<1.2.0`, fixed in `1.2.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Dec 2025 · Tags: Weak cryptography or TLS, CWE-252, CWE-331

Older: <https://agentprime.io/advisories/tag/cwe-252.md?cursor=WyIyMDI1LTEyLTE1VDE5OjM3OjM1LjAwMDAwMFoiLCJHSFNBLW05OHctY3FwMy1xY3FyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-252>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-252/>. Everything for agents: <https://agentprime.io/llms.txt>.