agentprime: CWE-252

Excessive memory allocation when decompressing crafted streams in github.com/andybalholm/brotli

Thu, 05 Nov 2026 22:55:15 GMT

github.com/andybalholm/brotli <1.2.7, fixed in 1.2.7. CVSS 9.2 (Critical). Critical: In CISA’s KEV catalogue since 27 Oct 2026: it is known to be exploited. CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 0.83 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-121639: WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

Wed, 04 Nov 2026 14:44:14 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115403: NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

Mon, 02 Nov 2026 21:40:21 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114408: NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full

Mon, 02 Nov 2026 15:04:39 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

Fri, 23 Oct 2026 20:49:11 GMT

github.com/labstack/echo/v5 >=5.0.0, <5.4.1, fixed in 5.4.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-110353: Unchecked return value in HAProxy and others

Thu, 22 Oct 2026 02:53:33 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56388: Apache bRPC: Out-of-Bounds Write in Redis Command Parser

Wed, 21 Oct 2026 11:40:41 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48741: libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS

Fri, 16 Oct 2026 15:45:32 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48503: libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead

Fri, 16 Oct 2026 15:44:47 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77207: Null Pointer Dereference in PKCS#7 bundle with no certificates

Tue, 13 Oct 2026 21:28:19 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107838: RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion

Fri, 09 Oct 2026 17:55:34 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107785: Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

Fri, 09 Oct 2026 13:15:57 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106436: Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

Thu, 08 Oct 2026 19:03:31 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18397: SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

Thu, 01 Oct 2026 21:49:42 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

Tue, 29 Sep 2026 18:21:33 GMT

undici >=6.7.0, <6.28.1 || >=7.0.0, <7.29.1 || >=8.0.0, <8.10.2, fixed in 6.28.1, 7.29.1, 8.10.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-95316: Unchecked return value in Google Chrome

Tue, 29 Sep 2026 17:32:00 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67409: RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

Fri, 25 Sep 2026 16:18:25 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71180: Unchecked return value in Dell Update Package Framework

Wed, 16 Sep 2026 16:12:10 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90648: Unchecked return value in WebAssembly wabt

Sat, 12 Sep 2026 23:16:34 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86749: snipe-it before 8.7.0 Data Loss via Failed Image Write

Wed, 09 Sep 2026 13:32:12 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86739: Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence

Wed, 09 Sep 2026 13:32:05 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86141: Unchecked return value in xmlsoft libxml2

Sat, 05 Sep 2026 04:27:59 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85649: Unchecked return value in chewkeanho software-actualizer

Fri, 04 Sep 2026 12:59:59 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14957: FIPS mode assertion failure via malicious CERT payload

Wed, 02 Sep 2026 02:19:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

Sun, 30 Aug 2026 15:13:23 GMT

ash_postgres >=0.25.0, <2.13.0, fixed in 2.13.0. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

Tue, 25 Aug 2026 18:31:53 GMT

nokogiri >=1.5.1, no fixed version yet. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-77641: Unchecked return value in Tor

Thu, 20 Aug 2026 21:09:41 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47245: MyBB: Buddy list corruption

Tue, 18 Aug 2026 15:51:33 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Tue, 11 Aug 2026 19:04:21 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11, fixed in 8.0.30, 9.0.19, 10.0.11. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

Fri, 24 Jul 2026 14:15:23 GMT

Magick.NET-Q16-AnyCPU <14.15.0, fixed in 14.15.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-26080: Unchecked return value in HAProxy

Mon, 20 Jul 2026 00:00:00 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

Mon, 06 Jul 2026 19:27:41 GMT

uu_chmod <0.6.0, fixed in 0.6.0. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-11972: tarfile opened in streaming mode mishandles EOF

Tue, 23 Jun 2026 22:02:45 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

Mon, 18 May 2026 20:36:53 GMT

Magick.NET-Q16-AnyCPU <14.13.1, fixed in 14.13.1. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

Fri, 15 May 2026 16:31:22 GMT

nimiq-keys <=0.2.0, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-29938: Unchecked return value in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed… and others

Fri, 15 May 2026 01:53:04 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-0028: Unchecked return value in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed… and others

Fri, 15 May 2026 01:52:29 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40060: BIG-IP Advanced WAF and ASM vulnerability

Wed, 13 May 2026 14:12:35 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20793: Unchecked return value in Intel(R) QAT software drivers for Windows

Tue, 12 May 2026 16:34:47 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals

Wed, 22 Apr 2026 19:19:28 GMT

nimiq-primitives <=0.2.0, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uutils coreutils has an Unchecked Return Value Issue

Wed, 22 Apr 2026 18:31:45 GMT

coreutils <=0.8.0, no fixed version yet. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35468: nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index

Fri, 03 Apr 2026 22:10:06 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33983: FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

Mon, 30 Mar 2026 21:42:27 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Withdrawn Advisory: Kirby CMS has Persistent DoS via Malformed Image Upload

Fri, 27 Mar 2026 22:21:26 GMT

getkirby/cms <5.2.0-rc.1, fixed in 5.2.0-rc.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ImageMagick has uninitialized pointer dereference in JBIG decoder

Thu, 12 Mar 2026 14:12:03 GMT

Magick.NET-Q16-AnyCPU <14.10.4, fixed in 14.10.4. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest

Wed, 11 Mar 2026 00:24:42 GMT

sigstore <0.2.3, fixed in 0.2.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Nokogiri does not check the return value from xmlC14NExecute

Wed, 18 Feb 2026 21:57:38 GMT

nokogiri >=1.5.1, <1.19.1, fixed in 1.19.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-0723: Unchecked Return Value in GitLab

Thu, 22 Jan 2026 13:34:08 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21920: Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash

Thu, 15 Jan 2026 20:28:10 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0421: Unchecked return value in Lenovo ThinkPad L13 Gen 6 BIOS and others

Wed, 14 Jan 2026 22:18:56 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.