<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-298</title><description>Every new CWE-298 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-86231: mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation</title><link>https://agentprime.io/advisories/CVE-2026-86231/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86231/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 06 Sep 2026 22:45:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1248: Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2024-1248/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1248/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 04 Jul 2026 20:38:49 GMT</pubDate><category>CVE</category></item><item><title>Casdoor doesn&apos;t verify that a JWT used for token exchange is still active</title><link>https://agentprime.io/advisories/GHSA-339w-3hqm-9pjc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-339w-3hqm-9pjc/</guid><description>github.com/casdoor/casdoor &lt;=1.1000.1-0.20260321120606-239e8bd69487, no fixed version yet. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 18:30:32 GMT</pubDate><category>Go</category><category>github.com/casdoor/casdoor</category><category>critical</category></item><item><title>CVE-2025-67109: Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.</title><link>https://agentprime.io/advisories/CVE-2025-67109/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67109/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-67108: eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.</title><link>https://agentprime.io/advisories/CVE-2025-67108/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67108/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-61736: iSTAR- Improper Validation of Certificate Expiration</title><link>https://agentprime.io/advisories/CVE-2025-61736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61736/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 12:36:24 GMT</pubDate><category>CVE</category></item><item><title>Infrahub: Deleted and expired API tokens can still authenticate</title><link>https://agentprime.io/advisories/GHSA-v2p7-4pv4-3wwh/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-v2p7-4pv4-3wwh/</guid><description>infrahub-server &lt;1.3.9 || &gt;=1.4.0, &lt;1.4.5, fixed in 1.3.9, 1.4.5. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Sep 2025 20:47:07 GMT</pubDate><category>PyPI</category><category>infrahub-server</category></item><item><title>CVE-2025-4384: Certificate validity not properly verified</title><link>https://agentprime.io/advisories/CVE-2025-4384/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4384/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 May 2025 15:59:27 GMT</pubDate><category>CVE</category></item><item><title>Pow Mnesia cache doesn&apos;t invalidate all expired keys on startup</title><link>https://agentprime.io/advisories/GHSA-3cjh-p6pw-jhv9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3cjh-p6pw-jhv9/</guid><description>pow &gt;=1.0.14, &lt;1.0.34, fixed in 1.0.34. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Sep 2023 17:00:08 GMT</pubDate><category>Hex</category><category>pow</category></item></channel></rss>