# CWE-345.

Every Advisory and CVE whose sources give the weakness CWE-345, newest first.

## Records, newest first

- [Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)](https://agentprime.io/advisories/CVE-2026-88982.md)
  `CVE-2026-88982` · CVE record: kubeflow pipelines · CVSS 5.4 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control, CWE-345
- [Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing](https://agentprime.io/advisories/CVE-2026-115770.md)
  `CVE-2026-115770` · CVE record: pocket-id pocket-id · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-345
- [WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results](https://agentprime.io/advisories/CVE-2026-121637.md)
  `CVE-2026-121637` · CVE record: WatchGuard AuthPoint Authentication Gateway · CVSS 8.9 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-345
- [CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification](https://agentprime.io/advisories/CVE-2026-121620.md)
  `CVE-2026-121620` · CVE record: CoopCycle coopcycle-web · CVSS 8.3 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-345
- [Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification](https://agentprime.io/advisories/CVE-2026-121606.md)
  `CVE-2026-121606` · CVE record: Qihoo 360 D621-2 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Emerson Ovation Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/CVE-2022-30267.md)
  `CVE-2022-30267` · CVE record: Emerson Ovation · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-345
- [Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler](https://agentprime.io/advisories/CVE-2026-121545.md)
  `CVE-2026-121545` · CVE record: robiningelbrecht dreeve · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-345
- [Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass](https://agentprime.io/advisories/CVE-2026-91075.md)
  `CVE-2026-91075` · CVE record: Unknown Eupago Gateway For Woocommerce · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-345
- [CryptoCloud - Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Webhook Secret](https://agentprime.io/advisories/CVE-2026-103327.md)
  `CVE-2026-103327` · CVE record: Unknown CryptoCloud · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-345
- [Munshi Payment Bypass via Unauthenticated Webhook Endpoint](https://agentprime.io/advisories/CVE-2026-119731.md)
  `CVE-2026-119731` · CVE record: Petpooja Munshi · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Authentication bypass, CWE-345
- [PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification](https://agentprime.io/advisories/CVE-2026-103310.md)
  `CVE-2026-103310` · CVE record: Unknown PayHere Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-345
- [http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity](https://agentprime.io/advisories/CVE-2026-120317.md)
  `CVE-2026-120317` · CVE record: http4k http4k · CVSS 8.2 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-345
- [ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts](https://agentprime.io/advisories/CVE-2026-63115.md)
  `CVE-2026-63115` · CVE record: TryGhost ActivityPub · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Authentication bypass, Broken access control, CWE-345
- [Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate](https://agentprime.io/advisories/CVE-2026-119289.md)
  `CVE-2026-119289` · CVE record: zuke-build zuke · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-345
- [Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector](https://agentprime.io/advisories/CVE-2026-119422.md)
  `CVE-2026-119422` · CVE record: juspay hyperswitch · CVSS 8.2 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-345
- [Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations](https://agentprime.io/advisories/CVE-2026-93008.md)
  `CVE-2026-93008` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-345
- [Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim](https://agentprime.io/advisories/GHSA-h2r5-x5m7-3935.md)
  `GHSA-h2r5-x5m7-3935`, `CVE-2026-115910` · PyPI `social-auth-core`: affected `<6.2.0`, fixed in `6.2.0` · CVSS 6.8 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Authentication bypass, CWE-345
- [filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker](https://agentprime.io/advisories/GHSA-rfpc-qcw5-3pc4.md)
  `GHSA-rfpc-qcw5-3pc4`, `CVE-2026-112939` · PyPI `filelock`: affected `>=3.22.0, <4.2.1`, fixed in `4.2.1` · CVSS 4.7 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-345
- [Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured](https://agentprime.io/advisories/CVE-2026-110985.md)
  `CVE-2026-110985` · CVE record: Apache Software Foundation Apache Kafka · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345, CWE-636, CWE-1287
- [Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default](https://agentprime.io/advisories/CVE-2026-110952.md)
  `CVE-2026-110952` · CVE record: Apache Software Foundation Apache Kafka · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-345, CWE-1188
- [Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation](https://agentprime.io/advisories/CVE-2026-103402.md)
  `CVE-2026-103402` · CVE record: Juniper Networks Session Smart Router and 1 more · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-345
- [Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass](https://agentprime.io/advisories/CVE-2026-103330.md)
  `CVE-2026-103330` · CVE record: Unknown Sadad QA Payment · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-345
- [BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler](https://agentprime.io/advisories/CVE-2026-103313.md)
  `CVE-2026-103313` · CVE record: Unknown BitPay Gateway for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-345
- [mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacks](https://agentprime.io/advisories/CVE-2026-118377.md)
  `CVE-2026-118377` · CVE record: mewebstudio pos · CVSS 8.7 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-345
- [Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service](https://agentprime.io/advisories/CVE-2026-104381.md)
  `CVE-2026-104381` · CVE record: WatchGuard Fireware OS · CVSS 6.0 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-345
- [better-auth: OAuth Proxy lets an attacker sign in as another user](https://agentprime.io/advisories/GHSA-r4xp-prcw-77qf.md)
  `GHSA-r4xp-prcw-77qf`, `CVE-2026-110864` · npm `better-auth`: affected `>=1.5.0-beta.12, <1.7.7`, fixed in `1.7.7` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-345
- [LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key](https://agentprime.io/advisories/GHSA-7hp6-4w63-5g45.md)
  `GHSA-7hp6-4w63-5g45`, `CVE-2026-114612` · PyPI `litellm`: affected `>=1.91.0, <1.100.4 || >=1.101.0, <1.101.3 || >=1.102.0, <1.102.2 || >=1.103.0, <1.103.1 || >=1.104.0rc1, <1.104.0rc2`, fixed in `1.100.4`, `1.101.3`, `1.102.2`, `1.103.1`, `1.104.0rc2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Privilege escalation, CWE-345, CWE-441
- [ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets](https://agentprime.io/advisories/CVE-2026-115408.md)
  `CVE-2026-115408` · CVE record: Eclipse Foundation Eclipse KeyPont · CVSS 5.5 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-345
- [PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery](https://agentprime.io/advisories/CVE-2026-103359.md)
  `CVE-2026-103359` · CVE record: Unknown PayDunya WooCommerce Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-345
- [DAMO Academy VideoLLaMA2 Model Loading \_\_init\_\_.py load_pretrained_model integrity check](https://agentprime.io/advisories/CVE-2026-116608.md)
  `CVE-2026-116608` · CVE record: DAMO Academy VideoLLaMA2 · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-345, CWE-354
- [rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation](https://agentprime.io/advisories/CVE-2026-116254.md)
  `CVE-2026-116254` · CVE record: rathena FluxCP · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-345, CWE-346
- [Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback](https://agentprime.io/advisories/CVE-2026-103300.md)
  `CVE-2026-103300` · CVE record: Unknown Eurobank WooCommerce Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-345
- [Yoosee GM8135S Camera Secure Boot signature verification](https://agentprime.io/advisories/CVE-2026-116116.md)
  `CVE-2026-116116` · CVE record: Yoosee GM8135S Camera · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget](https://agentprime.io/advisories/CVE-2026-115183.md)
  `CVE-2026-115183` · CVE record: Unknown Qi Addons For Elementor · CVSS 2.4 Low · Not analysed yet · Published 25 Oct 2026 · Tags: CWE-345
- [Forged signed tokens let any registered user take over other users and organizations](https://agentprime.io/advisories/CVE-2026-115933.md)
  `CVE-2026-115933` · CVE record: GitroomHQ postiz-app · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Oct 2026 · Tags: Authentication bypass, Broken access control, CWE-345
- [Unauthenticated payment reuse allows unpaid orders to be marked as paid](https://agentprime.io/advisories/CVE-2026-115937.md)
  `CVE-2026-115937` · CVE record: craftcms commerce-mollie · CVSS 8.7 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-345
- [chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For](https://agentprime.io/advisories/GHSA-j6qf-3m9c-vwj3.md)
  `GHSA-j6qf-3m9c-vwj3`, `CVE-2026-114437` · Go `github.com/go-chi/chi/v5`: affected `<5.4.0`, fixed in `5.4.0` · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-345, CWE-348
- [vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine](https://agentprime.io/advisories/GHSA-p92p-rxj5-7p2x.md)
  `GHSA-p92p-rxj5-7p2x`, `CVE-2026-114050` · PyPI `vllm`: affected `<0.31.0`, fixed in `0.31.0` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-345
- [SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin](https://agentprime.io/advisories/GHSA-rpx2-p6hp-x5gj.md)
  `GHSA-rpx2-p6hp-x5gj`, `CVE-2026-62204`, `GO-2026-6834` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<0.0.0-20260808010544-26ccb40d390e`, fixed in `0.0.0-20260808010544-26ccb40d390e` · CVSS 5.9 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Information disclosure, CWE-345
- [Goobi viewer: OpenID JWT audience not enforced by the verifier](https://agentprime.io/advisories/CVE-2026-55459.md)
  `CVE-2026-55459` · CVE record: intranda goobi-viewer-core · CVSS 7.4 High · Not analysed yet · Published 23 Oct 2026 · Tags: Authentication bypass, CWE-345
- [Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag](https://agentprime.io/advisories/CVE-2026-110510.md)
  `CVE-2026-110510` · CVE record: Unknown Essential Addons for Elementor · CVSS 3.5 Low · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-345
- [LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter](https://agentprime.io/advisories/CVE-2026-105256.md)
  `CVE-2026-105256` · CVE record: Unknown LatePoint · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-345
- [Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass](https://agentprime.io/advisories/CVE-2026-104642.md)
  `CVE-2026-104642` · CVE record: Unknown Simple Shopping Cart · CVSS 2.7 Low · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-345
- [Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient](https://agentprime.io/advisories/CVE-2026-104641.md)
  `CVE-2026-104641` · CVE record: Unknown Simple Shopping Cart · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-345
- [Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret](https://agentprime.io/advisories/CVE-2026-103301.md)
  `CVE-2026-103301` · CVE record: Unknown Payment Gateway for Telcell · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-345
- [Duplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchronization](https://agentprime.io/advisories/GHSA-hfwf-hgvp-4rr8.md)
  `GHSA-hfwf-hgvp-4rr8` · PyPI `vllm`: affected `*`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Oracle Corporation Oracle Business Intelligence Enterprise Edition](https://agentprime.io/advisories/CVE-2026-91588.md)
  `CVE-2026-91588` · CVE record: Oracle Corporation Oracle Business Intelligence Enterprise Edition · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-87414.md)
  `CVE-2026-87414` · CVE record: Oracle Corporation Oracle Solaris · CVSS 3.1 Low · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Google Chrome](https://agentprime.io/advisories/CVE-2026-113205.md)
  `CVE-2026-113205` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Advantech ADAM-3600](https://agentprime.io/advisories/CVE-2026-43835.md)
  `CVE-2026-43835` · CVE record: Advantech ADAM-3600 · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-345
- [LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification](https://agentprime.io/advisories/CVE-2026-112265.md)
  `CVE-2026-112265` · CVE record: langbot-app LangBot · CVSS 8.3 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345
- [BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation](https://agentprime.io/advisories/CVE-2026-112101.md)
  `CVE-2026-112101` · CVE record: BlackBeltTechnology pi-agent-dashboard · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345, CWE-346
- [Lack of integrity checks in Mobatek’s MobaXterm](https://agentprime.io/advisories/CVE-2026-112161.md)
  `CVE-2026-112161` · CVE record: Mobatek MobaXterm · CVSS 8.5 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345
- [iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery](https://agentprime.io/advisories/CVE-2026-86791.md)
  `CVE-2026-86791` · CVE record: Unknown iPOSpays Payment Gateway for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345
- [Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass](https://agentprime.io/advisories/CVE-2026-74922.md)
  `CVE-2026-74922` · CVE record: Unknown Document Gallery · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345
- [Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret](https://agentprime.io/advisories/CVE-2026-103311.md)
  `CVE-2026-103311` · CVE record: Unknown Coinbase Commerce Payment Gateway for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345
- [Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization](https://agentprime.io/advisories/CVE-2026-16460.md)
  `CVE-2026-16460` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345
- [ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "\*" (out)](https://agentprime.io/advisories/GHSA-vqff-r82h-9crc.md)
  `GHSA-vqff-r82h-9crc`, `CVE-2026-76894` · npm `@aborruso/ckan-mcp-server`: affected `<0.4.112`, fixed in `0.4.112` · CVSS 3.1 Low · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-345, CWE-940
- [SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate](https://agentprime.io/advisories/CVE-2026-111392.md)
  `CVE-2026-111392` · CVE record: sgl-project sglang · CVSS 6.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-345
- [Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation](https://agentprime.io/advisories/GHSA-hqm2-cfx2-2vgh.md)
  `GHSA-hqm2-cfx2-2vgh`, `CVE-2026-102682` · PyPI `pipecat-ai`: affected `>=0.0.98, <1.6.0`, fixed in `1.6.0` · CVSS 5.6 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Denial of service, Broken access control, CWE-345

Older: <https://agentprime.io/advisories/tag/cwe-345.md?cursor=WyIyMDI2LTEwLTE1VDIwOjIyOjE4LjAwMDAwMFoiLCJHSFNBLWhxbTItY2Z4Mi0ydmdoIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-345>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-345/>. Everything for agents: <https://agentprime.io/llms.txt>.