# CWE-345.

Every Advisory and CVE whose sources give the weakness CWE-345, newest first.

## Records, newest first (an older page)

- [Insufficient verification of data authenticity in Google Android](https://agentprime.io/advisories/CVE-2025-0092.md)
  `CVE-2025-0092` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-345, CWE-356
- [Belkin AX1800 Firmware Update data authenticity](https://agentprime.io/advisories/CVE-2025-9379.md)
  `CVE-2025-9379` · CVE record: Belkin AX1800 · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2025 · Tags: CWE-345
- [Picklescan is missing detection when calling pytorch function torch.utils.\_config_module.load_config](https://agentprime.io/advisories/GHSA-vv6j-3g6g-2pvj.md)
  `GHSA-vv6j-3g6g-2pvj`, `CVE-2025-71348`, `PYSEC-2026-245` · PyPI `picklescan`: affected `<0.0.28`, fixed in `0.0.28` · CVSS 7.6 High · Not analysed yet · Published 22 Aug 2025 · Tags: Insecure deserialization, CWE-345
- [Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper](https://agentprime.io/advisories/GHSA-vr7h-p6mm-wpmh.md)
  `GHSA-vr7h-p6mm-wpmh`, `CVE-2025-71370`, `PYSEC-2026-4136` · PyPI `picklescan`: affected `<0.0.28`, fixed in `0.0.28` · CVSS 7.6 High · Not analysed yet · Published 22 Aug 2025 · Tags: Insecure deserialization, CWE-345
- [Picklescan missing detection when calling pytorch function torch.utils.collect_env.run](https://agentprime.io/advisories/GHSA-f745-w6jp-hpxx.md)
  `GHSA-f745-w6jp-hpxx`, `CVE-2025-71350` · PyPI `picklescan`: affected `<0.0.28`, fixed in `0.0.28` · CVSS 7.6 High · Not analysed yet · Published 22 Aug 2025 · Tags: Insecure deserialization, CWE-345
- [Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression](https://agentprime.io/advisories/GHSA-f4x7-rfwp-v3xw.md)
  `GHSA-f4x7-rfwp-v3xw`, `CVE-2025-71356` · PyPI `picklescan`: affected `<0.0.28`, fixed in `0.0.28` · CVSS 7.6 High · Not analysed yet · Published 22 Aug 2025 · Tags: Insecure deserialization, CWE-345
- [Picklescan missing detection when calling pytorch function torch.\_dynamo.guards.GuardBuilder.get](https://agentprime.io/advisories/GHSA-86cj-95qr-2p4f.md)
  `GHSA-86cj-95qr-2p4f`, `CVE-2025-71353` · PyPI `picklescan`: affected `<0.0.28`, fixed in `0.0.28` · CVSS 7.6 High · Not analysed yet · Published 22 Aug 2025 · Tags: Insecure deserialization, CWE-345
- [Picklescan missing detection when calling pytorch function torch.utils.bottleneck.\_\_main\_\_.run_cprofile](https://agentprime.io/advisories/GHSA-4r9r-ch6f-vxmx.md)
  `GHSA-4r9r-ch6f-vxmx`, `CVE-2025-71366` · PyPI `picklescan`: affected `<0.0.28`, fixed in `0.0.28` · CVSS 7.6 High · Not analysed yet · Published 22 Aug 2025 · Tags: Insecure deserialization, CWE-345
- [Tenda G1 Firmware Update check_upload_file data authenticity](https://agentprime.io/advisories/CVE-2025-8980.md)
  `CVE-2025-8980` · CVE record: Tenda G1 · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-345
- [Tenda AC15 Firmware Update check_fw data authenticity](https://agentprime.io/advisories/CVE-2025-8979.md)
  `CVE-2025-8979` · CVE record: Tenda AC15 · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-345
- [D-Link DIR-619L boa FirmwareUpgrade data authenticity](https://agentprime.io/advisories/CVE-2025-8978.md)
  `CVE-2025-8978` · CVE record: D-Link DIR-619L · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-345
- [LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception](https://agentprime.io/advisories/CVE-2025-54792.md)
  `CVE-2025-54792` · CVE record: localsend localsend · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2025 · Tags: CWE-300, CWE-345
- [Ceph is vulnerable to authentication bypass through RadosGW](https://agentprime.io/advisories/CVE-2024-48916.md)
  `CVE-2024-48916` · CVE record: ceph ceph · CVSS 8.1 High · Not analysed yet · Published 30 Jul 2025 · Tags: CWE-345
- [Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header](https://agentprime.io/advisories/CVE-2025-6504.md)
  `CVE-2025-6504` · CVE record: Progress Software Hybrid Data Pipeline · CVSS 8.4 High · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-345
- [Ollama vulnerable to Cross-Domain Token Exposure](https://agentprime.io/advisories/GHSA-x9hg-5q6g-q3jr.md)
  `GHSA-x9hg-5q6g-q3jr`, `CVE-2025-51471`, `GO-2025-3824`, `PYSEC-2025-147` · Go `github.com/ollama/ollama`: affected `<=0.9.6`, no fixed version yet · CVSS 6.9 Medium · EPSS 0.19 · Not analysed yet · Published 22 Jul 2025 · Tags: Authentication bypass, CWE-345
- [CSP frame-src was not correctly enforced for paths](https://agentprime.io/advisories/CVE-2025-8038.md)
  `CVE-2025-8038` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jul 2025 · Tags: CWE-345
- [A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts](https://agentprime.io/advisories/CVE-2025-30192.md)
  `CVE-2025-30192` · CVE record: PowerDNS Recursor · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-345
- [Eluktronics Control Center REG File data authenticity](https://agentprime.io/advisories/CVE-2025-7884.md)
  `CVE-2025-7884` · CVE record: Eluktronics Control Center · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-345
- [@clerk/backend Performs Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/GHSA-9mp4-77wg-rwx9.md)
  `GHSA-9mp4-77wg-rwx9`, `CVE-2025-53548` · npm `@clerk/astro` and 8 more: affected `>=2.9.0, <2.10.2`, fixed in `2.10.2` · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-345
- [Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity check](https://agentprime.io/advisories/CVE-2025-7096.md)
  `CVE-2025-7096` · CVE record: Comodo Internet Security Premium · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2025 · Tags: CWE-345, CWE-354
- [Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability](https://agentprime.io/advisories/CVE-2025-5833.md)
  `CVE-2025-5833` · CVE record: Pioneer DMH-WT7600NEX · CVSS 4.6 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: CWE-345
- [Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability](https://agentprime.io/advisories/CVE-2025-5832.md)
  `CVE-2025-5832` · CVE record: Pioneer DMH-WT7600NEX · CVSS 6.8 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: CWE-345
- [No warning when opening executable terminal files on macOS](https://agentprime.io/advisories/CVE-2025-6426.md)
  `CVE-2025-6426` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-345
- [zkVM Underconstrained Vulnerability](https://agentprime.io/advisories/GHSA-g3qg-6746-3mg9.md)
  `GHSA-g3qg-6746-3mg9`, `CVE-2025-52484` · crates.io `risc0-circuit-rv32im` and 1 more: affected `>=2.0.0, <2.0.4`, fixed in `2.0.4` · CVSS 2.7 Low · Not analysed yet · Published 20 Jun 2025 · Tags: CWE-345
- [Taylored webhook validation vulnerabilities](https://agentprime.io/advisories/GHSA-8g98-m4j9-qww5.md)
  `GHSA-8g98-m4j9-qww5` · npm `taylored`: affected `>=7.0.5, <7.0.8`, fixed in `7.0.8` · No CVSS score · Not analysed yet · Published 18 Jun 2025 · Tags: Path traversal, Authentication bypass, Weak cryptography or TLS, CWE-345
- [Backup files can be modified and uploaded](https://agentprime.io/advisories/CVE-2025-49199.md)
  `CVE-2025-49199` · CVE record: SICK AG SICK Field Analytics · CVSS 8.8 High · Not analysed yet · Published 12 Jun 2025 · Tags: CWE-345
- [Fabio allows HTTP clients to manipulate custom headers it adds](https://agentprime.io/advisories/GHSA-q7p4-7xjv-j3wf.md)
  `GHSA-q7p4-7xjv-j3wf`, `CVE-2025-48865`, `GO-2025-3722` · Go `github.com/fabiolb/fabio`: affected `<1.6.6`, fixed in `1.6.6` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2025 · Tags: CWE-345, CWE-348
- [Gradio CORS Origin Validation Bypass Vulnerability](https://agentprime.io/advisories/GHSA-wmjh-cpqj-4v6x.md)
  `GHSA-wmjh-cpqj-4v6x`, `CVE-2025-5320`, `PYSEC-2026-1423` · PyPI `gradio`: affected `>=5.0.0, <=5.29.1`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 29 May 2025 · Tags: CWE-345, CWE-346
- [IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks.](https://agentprime.io/advisories/CVE-2025-27558.md)
  `CVE-2025-27558` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 May 2025 · Tags: CWE-345
- [Mithril snapshots for Cardano database could be compromised by an adversary](https://agentprime.io/advisories/GHSA-qv97-5qr8-2266.md)
  `GHSA-qv97-5qr8-2266` · crates.io `mithril-client`: affected `<0.12.2`, fixed in `0.12.2` · CVSS 4.9 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-345
- [React Router allows pre-render data spoofing on React-Router framework mode](https://agentprime.io/advisories/GHSA-cpj6-fhp6-mr6j.md)
  `GHSA-cpj6-fhp6-mr6j`, `CVE-2025-43865` · npm `react-router`: affected `>=7.0.0-pre.0, <7.5.2`, fixed in `7.5.2` · CVSS 8.2 High · Not analysed yet · Published 24 Apr 2025 · Tags: CWE-345
- [Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-27735.md)
  `CVE-2025-27735` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-345
- [WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack](https://agentprime.io/advisories/GHSA-5565-3c98-g6jc.md)
  `GHSA-5565-3c98-g6jc`, `CVE-2024-12369` · Maven `org.wildfly.security:wildfly-elytron` and 1 more: affected `>=1.17.0.Final, <2.2.9.Final || >=2.3.0.Final, <2.6.2.Final`, fixed in `2.2.9.Final`, `2.6.2.Final` · CVSS 4.2 Medium · Not analysed yet · Published 25 Mar 2025 · Tags: CWE-345
- [Fast-JWT Improperly Validates iss Claims](https://agentprime.io/advisories/GHSA-gm45-q3v2-6cf8.md)
  `GHSA-gm45-q3v2-6cf8`, `CVE-2025-30144` · npm `fast-jwt`: affected `<5.0.6`, fixed in `5.0.6` · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2025 · Tags: Authentication bypass, CWE-345
- [IROAD Dash Cam X5/Dash Cam X6 Domain origin validation](https://agentprime.io/advisories/CVE-2025-2346.md)
  `CVE-2025-2346` · CVE record: IROAD Dash Cam X5 and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 16 Mar 2025 · Tags: CWE-345, CWE-346
- [Vela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server](https://agentprime.io/advisories/GHSA-9m63-33q3-xq5x.md)
  `GHSA-9m63-33q3-xq5x`, `CVE-2025-27616`, `GO-2025-3509` · Go `github.com/go-vela/server`: affected `<0.25.3 || >=0.26.0, <0.26.3`, fixed in `0.25.3`, `0.26.3` · CVSS 8.6 High · Not analysed yet · Published 13 Mar 2025 · Tags: Authentication bypass, CWE-345
- [Zoom Apps - Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/CVE-2025-0149.md)
  `CVE-2025-0149` · CVE record: Zoom Communications, Inc Zoom Apps · CVSS 6.5 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-345
- [Zip Exploit Crashes Picklescan But Not PyTorch](https://agentprime.io/advisories/GHSA-7q5r-7gvp-wc82.md)
  `GHSA-7q5r-7gvp-wc82`, `CVE-2025-1944`, `PYSEC-2025-20` · PyPI `picklescan`: affected `<0.0.23`, fixed in `0.0.23` · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-345
- [Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch](https://agentprime.io/advisories/GHSA-w8jq-xcqf-f792.md)
  `GHSA-w8jq-xcqf-f792`, `CVE-2025-1945`, `PYSEC-2025-21` · PyPI `picklescan`: affected `<0.0.23`, fixed in `0.0.23` · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-345
- [Duplicate Advisory: Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch](https://agentprime.io/advisories/GHSA-2fh4-gpch-vqv4.md)
  `GHSA-2fh4-gpch-vqv4` · PyPI `picklescan`: affected `<0.0.23`, fixed in `0.0.23` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-345
- [Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch](https://agentprime.io/advisories/GHSA-w6mr-mj53-x258.md)
  `GHSA-w6mr-mj53-x258` · PyPI `picklescan`: affected `<0.0.23`, fixed in `0.0.23` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-345
- [Insufficient verification of data authenticity in GE Vernova N60 multilin and others](https://agentprime.io/advisories/CVE-2025-27257.md)
  `CVE-2025-27257` · CVE record: GE Vernova N60 multilin and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-345
- [Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004.](https://agentprime.io/advisories/CVE-2025-27680.md)
  `CVE-2025-27680` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2025 · Tags: CWE-345
- [libsignal-service-rs Doesn't Check Origin of Sync Messages](https://agentprime.io/advisories/CVE-2025-24903.md)
  `CVE-2025-24903` · CVE record: whisperfish libsignal-service-rs · CVSS 8.5 High · Not analysed yet · Published 13 Feb 2025 · Tags: CWE-345
- [Insufficient verification of data authenticity in Intel(R) DSA software](https://agentprime.io/advisories/CVE-2024-39805.md)
  `CVE-2024-39805` · CVE record: Intel(R) DSA software · CVSS 7.3 High · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-345
- [Fast DDS does not verify Permissions CA](https://agentprime.io/advisories/CVE-2025-24807.md)
  `CVE-2025-24807` · CVE record: eProsima Fast-DDS · CVSS 4.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-345
- [Hickory DNS failure to verify self-signed RRSIG for DNSKEYs](https://agentprime.io/advisories/GHSA-v7pc-74h8-xq2h.md)
  `GHSA-v7pc-74h8-xq2h`, `RUSTSEC-2025-0006` · crates.io `hickory-proto`: affected `>=0.8.0, <0.24.3 || >=0.25.0-alpha.1, <0.25.0-alpha.5`, fixed in `0.24.3`, `0.25.0-alpha.5` · No CVSS score · Not analysed yet · Published 10 Feb 2025 · Tags: CWE-345
- [Hickory DNS's DNSSEC validation may accept broken authentication chains](https://agentprime.io/advisories/GHSA-37wc-h8xc-5hc4.md)
  `GHSA-37wc-h8xc-5hc4`, `CVE-2025-25188` · crates.io `hickory-proto`: affected `>=0.8.0, <0.24.3`, fixed in `0.24.3` · CVSS 5.7 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: CWE-345
- [Insufficient data authenticity vulnerability in Janto](https://agentprime.io/advisories/CVE-2025-1108.md)
  `CVE-2025-1108` · CVE record: Impronta Janto · CVSS 8.6 High · Not analysed yet · Published 7 Feb 2025 · Tags: CWE-345
- [BIG-IP APM Endpoint Inspection vulnerability](https://agentprime.io/advisories/CVE-2025-23415.md)
  `CVE-2025-23415` · CVE record: F5 BIG-IP · CVSS 2.3 Low · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-345
- [Address of e-mail sender can be spoofed by malicious email](https://agentprime.io/advisories/CVE-2025-0510.md)
  `CVE-2025-0510` · CVE record: Mozilla Thunderbird · CVSS 6.5 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-345
- [SMC BMC Firmware Image Authentication Design Issue](https://agentprime.io/advisories/CVE-2024-10237.md)
  `CVE-2024-10237` · CVE record: SMCI MBD-X12DPG-OA6 · CVSS 7.2 High · Not analysed yet · Published 4 Feb 2025 · Tags: Weak cryptography or TLS, CWE-345
- [Mail spoofing](https://agentprime.io/advisories/CVE-2024-55929.md)
  `CVE-2024-55929` · CVE record: Xerox Xerox Workplace Suite · CVSS 5.3 Medium · Not analysed yet · Published 23 Jan 2025 · Tags: CWE-345
- [Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats](https://agentprime.io/advisories/CVE-2025-21606.md)
  `CVE-2025-21606` · CVE record: exelban stats · CVSS 8.7 High · Not analysed yet · Published 17 Jan 2025 · Tags: CWE-345
- [Insufficient verification of data authenticity in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54111.md)
  `CVE-2024-54111` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-345
- [Duplicate Advisory: WildFly Elytron OpenID Connect Client Extension authorization code injection attack](https://agentprime.io/advisories/GHSA-4v5x-9m47-cqr2.md)
  `GHSA-4v5x-9m47-cqr2` · Maven `org.wildfly:wildfly-elytron-oidc-client-subsystem`: affected `<=34.0.1.Final`, no fixed version yet · CVSS 4.2 Medium · Withdrawn · Not analysed yet · Published 9 Dec 2024 · Tags: CWE-345
- [Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass](https://agentprime.io/advisories/CVE-2024-52548.md)
  `CVE-2024-52548` · CVE record: Lorex 2K Indoor Wi-Fi Security Camera · CVSS 6.7 Medium · Not analysed yet · Published 3 Dec 2024 · Tags: CWE-345
- [quic-go affected by an ICMP Packet Too Large Injection Attack on Linux](https://agentprime.io/advisories/GHSA-px8v-pp82-rcvr.md)
  `GHSA-px8v-pp82-rcvr`, `CVE-2024-53259`, `GO-2024-3302` · Go `github.com/quic-go/quic-go`: affected `<0.48.2`, fixed in `0.48.2` · CVSS 6.5 Medium · Not analysed yet · Published 2 Dec 2024 · Tags: CWE-345
- [sigstore-java has vulnerability with bundle verification](https://agentprime.io/advisories/GHSA-q4xm-6fjc-5f6w.md)
  `GHSA-q4xm-6fjc-5f6w`, `CVE-2024-53267` · Maven `dev.sigstore:sigstore-java`: affected `>=1.0.0, <1.1.0`, fixed in `1.1.0` · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: Weak cryptography or TLS, CWE-345
- [Insufficient verification of authenticity in IPP](https://agentprime.io/advisories/CVE-2022-33861.md)
  `CVE-2022-33861` · CVE record: Eaton Intelligent Power Protector · CVSS 5.1 Medium · Not analysed yet · Published 25 Nov 2024 · Tags: CWE-345

Newest: <https://agentprime.io/advisories/tag/cwe-345.md>
Older: <https://agentprime.io/advisories/tag/cwe-345.md?cursor=WyIyMDI0LTExLTI1VDA4OjUwOjA0LjE3MDAwMFoiLCJDVkUtMjAyMi0zMzg2MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-345&cursor=WyIyMDI1LTA5LTE2VDIwOjE4OjU3LjAwMDAwMFoiLCJHSFNBLW1wN2MtbTNyaC1yNTZ2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-345/?cursor=WyIyMDI1LTA5LTE2VDIwOjE4OjU3LjAwMDAwMFoiLCJHSFNBLW1wN2MtbTNyaC1yNTZ2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.