# CWE-281.

Every Advisory and CVE whose sources give the weakness CWE-281, newest first.

## Records, newest first (an older page)

- [Disabled permissions can be granted by Jenkins SSH2 Easy Plugin](https://agentprime.io/advisories/GHSA-4gh2-m88h-8cj8.md)
  `GHSA-4gh2-m88h-8cj8`, `CVE-2023-41939` · Maven `org.jenkins-ci.plugins:ssh2easy`: affected `<1.6`, fixed in `1.6` · CVSS 8.8 High · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-281
- [Arbitrary File Overwrite using less command](https://agentprime.io/advisories/CVE-2023-31926.md)
  `CVE-2023-31926` · CVE record: Brocade Fabric OS · CVSS 7.1 High · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-281, CWE-665
- [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md)
  `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281
- [Access Control Bypass in Spring Security](https://agentprime.io/advisories/GHSA-3h6f-g5f3-gc4w.md)
  `GHSA-3h6f-g5f3-gc4w`, `CVE-2023-34034` · Maven `org.springframework.security:spring-security-config`: affected `>=5.6.0, <5.6.12 || >=5.7.0, <5.7.10 || >=5.8.0, <5.8.5 || >=6.0.0, <6.0.5 || >=6.1.0, <6.1.2`, fixed in `5.6.12`, `5.7.10`, `5.8.5`, `6.0.5`, `6.1.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2023 · Tags: Broken access control, CWE-281
- [User access not updated with privilege change in Tuleap](https://agentprime.io/advisories/CVE-2023-35938.md)
  `CVE-2023-35938` · CVE record: Enalean tuleap · CVSS 4.1 Medium · Not analysed yet · Published 29 Jun 2023 · Tags: CWE-281
- [ITM Windows Agent Insecure Filesystem Permissions](https://agentprime.io/advisories/CVE-2023-2818.md)
  `CVE-2023-2818` · CVE record: Proofpoint Insider Threat Management · CVSS 5.5 Medium · Not analysed yet · Published 27 Jun 2023 · Tags: CWE-281
- [Trend Micro, Inc. Trend Micro Apex One: An Improper access control vulnerability in Trend Micro Apex One and Apex One as a…](https://agentprime.io/advisories/CVE-2023-32552.md)
  `CVE-2023-32552` · CVE record: Trend Micro, Inc. Trend Micro Apex One · No CVSS score · Not analysed yet · Published 26 Jun 2023 · Tags: CWE-281
- [A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM v2, and FPC that the…](https://agentprime.io/advisories/CVE-2023-2993.md)
  `CVE-2023-2993` · CVE record: Lenovo System Management Module (SMM) and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 26 Jun 2023 · Tags: CWE-281
- [Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile.](https://agentprime.io/advisories/CVE-2023-34672.md)
  `CVE-2023-34672` · CVE record · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-281
- [This issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2023-32400.md)
  `CVE-2023-32400` · CVE record: Apple macOS and 2 more · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-281
- [A privacy issue was addressed with improved private data redaction for log entries.](https://agentprime.io/advisories/CVE-2023-32388.md)
  `CVE-2023-32388` · CVE record: Apple macOS and 2 more · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-281
- [A logic issue was addressed with improved state management.](https://agentprime.io/advisories/CVE-2023-32355.md)
  `CVE-2023-32355` · CVE record: Apple macOS · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-281
- [Mozilla Firefox: If temporary "one-time" permissions, such as the ability to use the Camera…](https://agentprime.io/advisories/CVE-2023-28161.md)
  `CVE-2023-28161` · CVE record: Mozilla Firefox · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-281
- [Remote code execution in Voyager](https://agentprime.io/advisories/GHSA-2x3r-7jgm-gh8x.md)
  `GHSA-2x3r-7jgm-gh8x`, `CVE-2020-36070`, `PKSA-hkd4-64b8-cmm1` · Packagist `tcg/voyager`: affected `<=1.4.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Apr 2023 · Tags: CWE-281
- [Trellix Agent: A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier…](https://agentprime.io/advisories/CVE-2023-0975.md)
  `CVE-2023-0975` · CVE record: Trellix Trellix Agent · CVSS 8.2 High · Not analysed yet · Published 3 Apr 2023 · Tags: CWE-281
- [Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled](https://agentprime.io/advisories/GHSA-436g-2f92-cvhh.md)
  `GHSA-436g-2f92-cvhh`, `CVE-2023-28668` · Maven `org.jenkins-ci.plugins:role-strategy`: affected `<587.588.v850a_20a_30162`, fixed in `587.588.v850a_20a_30162` · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2023 · Tags: CWE-281
- [runc AppArmor bypass with symlinked /proc](https://agentprime.io/advisories/GHSA-g2j6-57v7-gm8c.md)
  `GHSA-g2j6-57v7-gm8c`, `CVE-2023-28642`, `GO-2023-1683` · Go `github.com/opencontainers/runc`: affected `<1.1.5`, fixed in `1.1.5` · CVSS 6.1 Medium · Not analysed yet · Published 30 Mar 2023 · Tags: Path traversal, CWE-281
- [rootless: \`/sys/fs/cgroup\` is writable when cgroupns isn't unshared in runc](https://agentprime.io/advisories/GHSA-m8cg-xc2p-r3fc.md)
  `GHSA-m8cg-xc2p-r3fc`, `CVE-2023-25809`, `GO-2023-1682` · Go `github.com/opencontainers/runc`: affected `<1.1.5`, fixed in `1.1.5` · CVSS 5.0 Medium · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-281
- [App lockout in nextcloud Android app can be bypassed via thirdparty apps](https://agentprime.io/advisories/CVE-2023-28646.md)
  `CVE-2023-28646` · CVE record: nextcloud security-advisories · CVSS 4.4 Medium · Not analysed yet · Published 30 Mar 2023 · Tags: Authentication bypass, CWE-281
- [App pin of the iOS app can be bypassed in Nextcloud iOS](https://agentprime.io/advisories/CVE-2023-28647.md)
  `CVE-2023-28647` · CVE record: nextcloud security-advisories · CVSS 4.4 Medium · Not analysed yet · Published 30 Mar 2023 · Tags: Authentication bypass, CWE-281
- [Delete permissions are not saved when creating public share in Nextcloud server](https://agentprime.io/advisories/CVE-2023-25817.md)
  `CVE-2023-25817` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-281
- [Samsung Mobile Samsung Calendar: Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13…](https://agentprime.io/advisories/CVE-2023-21464.md)
  `CVE-2023-21464` · CVE record: Samsung Mobile Samsung Calendar · CVSS 4.0 Medium · Not analysed yet · Published 16 Mar 2023 · Tags: CWE-281
- [vantage6 vulnerable to Improper Preservation of Permissions](https://agentprime.io/advisories/GHSA-vvjv-97j8-94xh.md)
  `GHSA-vvjv-97j8-94xh`, `CVE-2023-22738`, `PYSEC-2023-53` · PyPI `vantage6`: affected `<3.8.0`, fixed in `3.8.0` · CVSS 6.3 Medium · Not analysed yet · Published 28 Feb 2023 · Tags: CWE-281
- [Allowed DELETE on resources on object locked buckets under Governance mode in Minio](https://agentprime.io/advisories/CVE-2023-25812.md)
  `CVE-2023-25812` · CVE record: minio minio · CVSS 6.5 Medium · Not analysed yet · Published 21 Feb 2023 · Tags: CWE-281
- [The bundle management module lacks permission verification in some APIs.](https://agentprime.io/advisories/CVE-2022-48301.md)
  `CVE-2022-48301` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-281
- [The SystemUI has a vulnerability in permission management.](https://agentprime.io/advisories/CVE-2022-48296.md)
  `CVE-2022-48296` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-281
- [The IHwAntiMalPlugin interface lacks permission verification.](https://agentprime.io/advisories/CVE-2022-48295.md)
  `CVE-2022-48295` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-281
- [kernel: An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver…](https://agentprime.io/advisories/CVE-2022-4139.md)
  `CVE-2022-4139` · CVE record: kernel · CVSS 7.8 High · Not analysed yet · Published 27 Jan 2023 · Tags: CWE-281
- [An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interfa…](https://agentprime.io/advisories/CVE-2020-18329.md)
  `CVE-2020-18329` · CVE record · CVSS 7.5 High · Not analysed yet · Published 25 Jan 2023 · Tags: CWE-281
- [NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to c…](https://agentprime.io/advisories/CVE-2022-42260.md)
  `CVE-2022-42260` · CVE record: NVIDIA vGPU software (guest driver) - Linux, NVIDIA Cloud Gaming (guest driver) · CVSS 7.8 High · Not analysed yet · Published 30 Dec 2022 · Tags: CWE-281
- [Mozilla Thunderbird: A cross-origin iframe referencing an XSLT document would inherit the parent domain's…](https://agentprime.io/advisories/CVE-2022-38473.md)
  `CVE-2022-38473` · CVE record: Mozilla Thunderbird and 2 more · CVSS 8.8 High · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-281
- [GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it continuously misbehaves by never forwarding topic messages.](https://agentprime.io/advisories/CVE-2022-47547.md)
  `CVE-2022-47547` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-281
- [Trellix xAgent permission bypass vulnerability](https://agentprime.io/advisories/CVE-2022-4326.md)
  `CVE-2022-4326` · CVE record: Trellix xAgent · CVSS 5.5 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-281
- [BigBlueButton contains Improper Preservation of Permissions for whiteboard](https://agentprime.io/advisories/CVE-2022-41963.md)
  `CVE-2022-41963` · CVE record: bigbluebutton bigbluebutton · CVSS 2.7 Low · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-281
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead t…](https://agentprime.io/advisories/CVE-2022-31608.md)
  `CVE-2022-31608` · CVE record: NVIDIA GeForce, Workstation, Compute · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2022 · Tags: CWE-281
- [Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN…: Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN…](https://agentprime.io/advisories/CVE-2022-26024.md)
  `CVE-2022-26024` · CVE record: Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-281
- [OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions](https://agentprime.io/advisories/GHSA-5pj3-6fqm-8m7m.md)
  `GHSA-5pj3-6fqm-8m7m`, `CVE-2022-44020`, `PYSEC-2026-1059`, `PYSEC-2026-3079` · PyPI `sushy-tools` and 1 more: affected `<0.21.1`, fixed in `0.21.1` · CVSS 5.5 Medium · Not analysed yet · Published 30 Oct 2022 · Tags: CWE-281
- [The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair.](https://agentprime.io/advisories/CVE-2020-12744.md)
  `CVE-2020-12744` · CVE record · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2022 · Tags: CWE-281
- [Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application.](https://agentprime.io/advisories/CVE-2022-41708.md)
  `CVE-2022-41708` · CVE record: relatedcode/Messenger · CVSS 4.3 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-281
- [A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header.](https://agentprime.io/advisories/CVE-2019-14841.md)
  `CVE-2019-14841` · CVE record: Business-central · CVSS 8.8 High · Not analysed yet · Published 17 Oct 2022 · Tags: CWE-281
- [fhir-works-on-aws-authz-smart handles permissions improperly](https://agentprime.io/advisories/GHSA-vv7x-7w4m-q72f.md)
  `GHSA-vv7x-7w4m-q72f`, `CVE-2022-39230` · npm `fhir-works-on-aws-authz-smart`: affected `>=3.1.1, <3.1.3`, fixed in `3.1.3` · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2022 · Tags: Information disclosure, CWE-281
- [ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page.](https://agentprime.io/advisories/CVE-2022-38577.md)
  `CVE-2022-38577` · CVE record · CVSS 8.8 High · Not analysed yet · Published 19 Sept 2022 · Tags: CWE-281
- [Shopware access control list bypassed via crafted specific URLs](https://agentprime.io/advisories/GHSA-qc43-pgwq-3q2q.md)
  `GHSA-qc43-pgwq-3q2q`, `CVE-2022-36102`, `PKSA-znm8-j44y-tzqy` · Packagist `shopware/shopware`: affected `<5.7.15`, fixed in `5.7.15` · CVSS 6.3 Medium · Not analysed yet · Published 16 Sept 2022 · Tags: CWE-281
- [A flaw was found in satellite.](https://agentprime.io/advisories/CVE-2021-3414.md)
  `CVE-2021-3414` · CVE record: satellite · No CVSS score · Not analysed yet · Published 26 Aug 2022 · Tags: CWE-281
- [Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an…](https://agentprime.io/advisories/CVE-2022-31237.md)
  `CVE-2022-31237` · CVE record: Dell PowerScale OneFS · CVSS 3.3 Low · Not analysed yet · Published 22 Aug 2022 · Tags: CWE-281
- [Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse](https://agentprime.io/advisories/CVE-2022-31096.md)
  `CVE-2022-31096` · CVE record: discourse discourse · CVSS 5.7 Medium · Not analysed yet · Published 27 Jun 2022 · Tags: CWE-281
- [Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch](https://agentprime.io/advisories/GHSA-hr65-qq6p-87r4.md)
  `GHSA-hr65-qq6p-87r4`, `BIT-elasticsearch-2021-22137`, `CVE-2021-22137` · Maven `org.elasticsearch:elasticsearch`: affected `>=7.11.0, <7.11.2 || <6.8.15`, fixed in `7.11.2`, `6.8.15` · CVSS 5.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Information disclosure, CWE-281
- [Improper Preservation of Permissions in Apache Struts](https://agentprime.io/advisories/GHSA-ccp5-gg58-pxfm.md)
  `GHSA-ccp5-gg58-pxfm`, `CVE-2019-0233` · Maven `org.apache.struts:struts2-core`: affected `>=2.0.0, <2.5.22`, fixed in `2.5.22` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.66 · Not analysed yet · Published 24 May 2022 · Tags: CWE-281
- [Missing permission check in Jenkins Support Core Plugin](https://agentprime.io/advisories/GHSA-j52r-pmqv-wm38.md)
  `GHSA-j52r-pmqv-wm38`, `CVE-2019-16539` · Maven `org.jenkins-ci.plugins:support-core`: affected `<2.64`, fixed in `2.64` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-281
- [Jython Improper Access Restrictions vulnerability](https://agentprime.io/advisories/GHSA-9347-9w64-q5wp.md)
  `GHSA-9347-9w64-q5wp`, `CVE-2013-2027` · Maven `org.python:jython-standalone`: affected `<2.7.2b3`, fixed in `2.7.2b3` · No CVSS score · Not analysed yet · Published 14 May 2022 · Tags: CWE-281
- [Smarty Does Not Consider Umask Values When Setting Permissions](https://agentprime.io/advisories/GHSA-6m9f-8vwq-97pm.md)
  `GHSA-6m9f-8vwq-97pm`, `CVE-2009-5054`, `PKSA-54c6-f9b9-7wg4` · Packagist `smarty/smarty`: affected `<3.0.0-beta4`, fixed in `3.0.0-beta4` · No CVSS score · Not analysed yet · Published 2 May 2022 · Tags: CWE-281
- [Podman publishes a malicious image to public registries](https://agentprime.io/advisories/GHSA-66vw-v2x9-hw75.md)
  `GHSA-66vw-v2x9-hw75`, `CVE-2022-1227`, `GO-2022-0558` · Go `github.com/containers/podman/v3` and 1 more: affected `<3.4`, fixed in `3.4` · CVSS 8.8 High · Not analysed yet · Published 30 Apr 2022 · Tags: Privilege escalation, CWE-281
- [Object state limitation has no effect](https://agentprime.io/advisories/GHSA-w8qp-hmh5-4v9v.md)
  `GHSA-w8qp-hmh5-4v9v`, `PKSA-3cph-m8cm-pv53` · Packagist `ezsystems/ezplatform-kernel`: affected `>=1.3.0, <1.3.17`, fixed in `1.3.17` · No CVSS score · Not analysed yet · Published 29 Apr 2022 · Tags: CWE-281
- [Object state limitation has no effect](https://agentprime.io/advisories/GHSA-gvj8-4cj4-h776.md)
  `GHSA-gvj8-4cj4-h776`, `PKSA-yr3r-6284-yj76` · Packagist `ibexa/core`: affected `>=4.0.0, <4.0.5 || >=4.1.0, <4.1.2`, fixed in `4.0.5`, `4.1.2` · No CVSS score · Not analysed yet · Published 29 Apr 2022 · Tags: CWE-281
- [apicast: A flaw was found in 3Scale APICast in versions prior to 2.11.0…](https://agentprime.io/advisories/CVE-2021-3523.md)
  `CVE-2021-3523` · CVE record: apicast · No CVSS score · Not analysed yet · Published 27 Apr 2022 · Tags: CWE-281
- [Dell PowerScale OneFS: Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x…](https://agentprime.io/advisories/CVE-2022-24428.md)
  `CVE-2022-24428` · CVE record: Dell PowerScale OneFS · CVSS 6.3 Medium · Not analysed yet · Published 8 Apr 2022 · Tags: CWE-281
- [kernel: An unauthorized access to the execution of the setuid file with capabilities flaw in the…](https://agentprime.io/advisories/CVE-2021-3847.md)
  `CVE-2021-3847` · CVE record: kernel · No CVSS score · Not analysed yet · Published 1 Apr 2022 · Tags: CWE-281
- [Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin](https://agentprime.io/advisories/GHSA-8hh2-rxm8-7fj8.md)
  `GHSA-8hh2-rxm8-7fj8`, `CVE-2022-28147` · Maven `org.jenkins-ci.plugins:ci-with-toad-edge`: affected `<2.4`, fixed in `2.4` · CVSS 4.3 Medium · Not analysed yet · Published 30 Mar 2022 · Tags: Broken access control, CWE-281
- [kernel: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver…](https://agentprime.io/advisories/CVE-2022-0330.md)
  `CVE-2022-0330` · CVE record: kernel · No CVSS score · Not analysed yet · Published 25 Mar 2022 · Tags: CWE-281
- [Missing permission checks in Jenkins Release Helper Plugin](https://agentprime.io/advisories/GHSA-p9gq-76fj-4p4p.md)
  `GHSA-p9gq-76fj-4p4p`, `CVE-2022-27215` · Maven `org.jenkins-ci.plugins:release-helper`: affected `<=1.3.3`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 16 Mar 2022 · Tags: Broken access control, CWE-281

Newest: <https://agentprime.io/advisories/tag/cwe-281.md>
Older: <https://agentprime.io/advisories/tag/cwe-281.md?cursor=WyIyMDIyLTAzLTE2VDAwOjAwOjQyLjAwMDAwMFoiLCJHSFNBLXA5Z3EtNzZmai00cDRwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-281&cursor=WyIyMDIzLTA5LTA2VDE1OjMwOjI2LjAwMDAwMFoiLCJHSFNBLTk4MzItbWdnNC0zZ3I2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-281/?cursor=WyIyMDIzLTA5LTA2VDE1OjMwOjI2LjAwMDAwMFoiLCJHSFNBLTk4MzItbWdnNC0zZ3I2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.