# CWE-345.

Every Advisory and CVE whose sources give the weakness CWE-345, newest first.

## Records, newest first (an older page)

- [joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json](https://agentprime.io/advisories/CVE-2026-102946.md)
  `CVE-2026-102946` · CVE record: authlib joserfc · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-345
- [Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening](https://agentprime.io/advisories/CVE-2026-55103.md)
  `CVE-2026-55103` · CVE record: discourse discourse-activity-pub · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control, CWE-345
- [Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook](https://agentprime.io/advisories/CVE-2026-92429.md)
  `CVE-2026-92429` · CVE record: Unknown Rede Itaú for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-345
- [Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook](https://agentprime.io/advisories/CVE-2026-92428.md)
  `CVE-2026-92428` · CVE record: Unknown Rede Itaú for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-345
- [Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret](https://agentprime.io/advisories/CVE-2026-103324.md)
  `CVE-2026-103324` · CVE record: Unknown Cardinity Payment Gateway for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-345
- [FileRise OIDC login can bind an attacker identity to an existing local account](https://agentprime.io/advisories/CVE-2026-104108.md)
  `CVE-2026-104108` · CVE record: error311 FileRise · CVSS 8.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass, CWE-345
- [Gitea required Actions check bypass through skipped workflows](https://agentprime.io/advisories/CVE-2026-66874.md)
  `CVE-2026-66874` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Broken access control, CWE-345, CWE-693, CWE-807
- [BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint](https://agentprime.io/advisories/CVE-2026-110607.md)
  `CVE-2026-110607` · CVE record: BizSpring BizSpring Shop and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-345
- [Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN](https://agentprime.io/advisories/CVE-2026-88998.md)
  `CVE-2026-88998` · CVE record: Unknown Tickera · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-345
- [WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce](https://agentprime.io/advisories/CVE-2026-82844.md)
  `CVE-2026-82844` · CVE record: Unknown WPForms Lite · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-345
- [Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint](https://agentprime.io/advisories/CVE-2026-103308.md)
  `CVE-2026-103308` · CVE record: Unknown Visma Pay for WooCommerce · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-345
- [Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()](https://agentprime.io/advisories/CVE-2026-108069.md)
  `CVE-2026-108069` · CVE record: Unknown Sunshine Photo Cart · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-345
- [LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error Message](https://agentprime.io/advisories/CVE-2026-107160.md)
  `CVE-2026-107160` · CVE record: Unknown LTL Freight Quotes · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-345
- [Insufficient verification of data authenticity in Schneider Electric Sage RTU 1410 and others](https://agentprime.io/advisories/CVE-2026-102250.md)
  `CVE-2026-102250` · CVE record: Schneider Electric Sage RTU 1410 and 4 more · CVSS 8.6 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-345
- [D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification](https://agentprime.io/advisories/CVE-2026-108971.md)
  `CVE-2026-108971` · CVE record: D-Link DCS-930L · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Code for IBMi: Uses IBM i components with blind check allowing arbitrary code execution](https://agentprime.io/advisories/CVE-2026-49483.md)
  `CVE-2026-49483` · CVE record: codefori vscode-ibmi · CVSS 8.9 High · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control, CWE-345
- [Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies](https://agentprime.io/advisories/CVE-2026-109365.md)
  `CVE-2026-109365` · CVE record: ZcashFoundation zebra · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-345
- [Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery](https://agentprime.io/advisories/CVE-2026-109359.md)
  `CVE-2026-109359` · CVE record: edgelesssys contrast · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-345
- [InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity](https://agentprime.io/advisories/CVE-2026-108568.md)
  `CVE-2026-108568` · CVE record: InstantSoft icms2 · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-345
- [WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-107420.md)
  `CVE-2026-107420` · CVE record: Narinder Singh Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: CWE-345
- [Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover](https://agentprime.io/advisories/GHSA-xv7q-fvmc-jx96.md)
  `GHSA-xv7q-fvmc-jx96`, `CVE-2026-62367`, `GO-2026-6758` · Go `code.vikunja.io/api`: affected `>=1.0.0, <2.4.0`, fixed in `2.4.0` · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Authentication bypass, CWE-345
- [Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery)](https://agentprime.io/advisories/CVE-2026-107852.md)
  `CVE-2026-107852` · CVE record: Jexactyl Jexactyl · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-345
- [IBM DataPower Gateway Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/CVE-2026-13257.md)
  `CVE-2026-13257` · CVE record: IBM DataPower Gateway 10.6CD and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-345
- [Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook](https://agentprime.io/advisories/CVE-2026-103517.md)
  `CVE-2026-103517` · CVE record: Unknown Airwallex Online Payments Gateway · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-345
- [AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check](https://agentprime.io/advisories/CVE-2026-107284.md)
  `CVE-2026-107284` · CVE record: AsyncHttpClient async-http-client · CVSS 3.7 Low · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-345, CWE-670
- [Vault PKI ACME Issues Certificate With Unvalidated SANs](https://agentprime.io/advisories/CVE-2026-105818.md)
  `CVE-2026-105818` · CVE record: HashiCorp Vault and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-345
- [Langflow: IP Spoofing Bypass via \`X-Forwarded-For\` Allowing Remote Configuration Write](https://agentprime.io/advisories/GHSA-4f6c-2vvp-gw82.md)
  `GHSA-4f6c-2vvp-gw82`, `CVE-2026-105741`, `PYSEC-2026-4229` · PyPI `langflow`: affected `>=1.5.0, <1.10.3`, fixed in `1.10.3` · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass, CWE-345
- [PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing](https://agentprime.io/advisories/GHSA-qj9c-59p6-8cgx.md)
  `GHSA-qj9c-59p6-8cgx`, `CVE-2026-61428`, `PYSEC-2026-4259` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 6.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass, Broken access control, CWE-345
- [Account Takeover Vulnerability in Manacle Technologies ERP System](https://agentprime.io/advisories/CVE-2026-107102.md)
  `CVE-2026-107102` · CVE record: Manacle Technologies Multi-tenant ERP System · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-345
- [Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler](https://agentprime.io/advisories/CVE-2026-82212.md)
  `CVE-2026-82212` · CVE record: Unknown Nexi XPay Build · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-345
- [wolfSSH ECDSA host key curve not validated against negotiated algorithm](https://agentprime.io/advisories/CVE-2026-16516.md)
  `CVE-2026-16516` · CVE record: wolfSSL Inc. wolfSSH · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-345
- [MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server](https://agentprime.io/advisories/GHSA-6qxp-vccf-f47h.md)
  `GHSA-6qxp-vccf-f47h`, `CVE-2026-104850` · npm `@modelcontextprotocol/client` and 1 more: affected `>=2.0.0, <2.2.0`, fixed in `2.2.0` · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Hard-coded credentials, CWE-345
- [Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions](https://agentprime.io/advisories/CVE-2026-59357.md)
  `CVE-2026-59357` · CVE record: Cloud Foundry UAA and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-345
- [PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion](https://agentprime.io/advisories/GHSA-x33g-cr3x-6449.md)
  `GHSA-x33g-cr3x-6449`, `CVE-2026-102275`, `PYSEC-2026-4183` · PyPI `pyjwt`: affected `>=2.1.0, <2.15.0`, fixed in `2.15.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-345, CWE-348
- [Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution](https://agentprime.io/advisories/CVE-2026-104805.md)
  `CVE-2026-104805` · CVE record: Mitel Mitel MiVoice Office 400 · CVSS 8.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal, Unrestricted file upload, CWE-345, CWE-494
- [invariant-systems-ai aiir Policy Gate signature verification](https://agentprime.io/advisories/CVE-2026-105161.md)
  `CVE-2026-105161` · CVE record: invariant-systems-ai aiir · CVSS 6.9 Medium · Not analysed yet · Published 4 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345
- [OpenPGP data signature accepted from a signing subkey without cross-certification](https://agentprime.io/advisories/CVE-2026-71887.md)
  `CVE-2026-71887` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345
- [OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check](https://agentprime.io/advisories/CVE-2026-85515.md)
  `CVE-2026-85515` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 2 more · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2026 · Tags: CWE-345, CWE-354
- [Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite](https://agentprime.io/advisories/CVE-2026-104422.md)
  `CVE-2026-104422` · CVE record: ZcashFoundation zebra · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-345
- [Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes](https://agentprime.io/advisories/CVE-2026-104419.md)
  `CVE-2026-104419` · CVE record: ZcashFoundation zebra · CVSS 6.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-345
- [Apache Directory LDAP API: Injection of plaintext responses during StartTLS](https://agentprime.io/advisories/CVE-2026-103878.md)
  `CVE-2026-103878` · CVE record: Apache Software Foundation Apache Directory LDAP API · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-345
- [CVE-2026-104056](https://agentprime.io/advisories/CVE-2026-104056.md)
  `CVE-2026-104056` · CVE record: Authlib Authlib · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-345, CWE-346, CWE-829
- [JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard](https://agentprime.io/advisories/GHSA-6966-vjj6-99xv.md)
  `GHSA-6966-vjj6-99xv`, `CVE-2026-102831`, `PYSEC-2026-4057`, `PYSEC-2026-4058`, `PYSEC-2026-4060`, `PYSEC-2026-4112` · PyPI `notebook`: affected `>=7.5.0, <7.6.3`, fixed in `7.6.3` · CVSS 8.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-345
- [Kiteworks Core Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/CVE-2026-102140.md)
  `CVE-2026-102140` · CVE record: Kiteworks Core · CVSS 4.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-345
- [UltrafastSecp256k1: ECDSA adaptor verification accepts non-adaptable pre-signatures due to missing DLEQ binding](https://agentprime.io/advisories/CVE-2026-55174.md)
  `CVE-2026-55174` · CVE record: shrec UltrafastSecp256k1 · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection](https://agentprime.io/advisories/CVE-2026-89238.md)
  `CVE-2026-89238` · CVE record: Apache Software Foundation Apache WSS4J · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-345
- [Editor can forge file-provisioning provenance on dashboards via the dashboard API](https://agentprime.io/advisories/CVE-2026-13720.md)
  `CVE-2026-13720` · CVE record: Grafana Grafana OSS and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Broken access control, CWE-345
- [PyJWT: PyJWKClient follows redirects when fetching JWKS](https://agentprime.io/advisories/GHSA-9v7f-9g4p-ffgj.md)
  `GHSA-9v7f-9g4p-ffgj`, `CVE-2026-102267`, `PYSEC-2026-4144` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-345
- [undici vulnerable to caching and replay of unsafe HTTP method responses](https://agentprime.io/advisories/GHSA-8436-99hf-9mmv.md)
  `GHSA-8436-99hf-9mmv`, `CVE-2026-85008` · npm `undici`: affected `>=7.0.0, <7.29.1 || >=8.0.0, <8.10.2`, fixed in `7.29.1`, `8.10.2` · CVSS 3.7 Low · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-345
- [Electron: Sandboxed preload code cache can be poisoned by a compromised renderer](https://agentprime.io/advisories/GHSA-qmv3-fv6v-rmhq.md)
  `GHSA-qmv3-fv6v-rmhq`, `CVE-2026-102677` · npm `electron`: affected `>=42.3.3, <42.10.0 || >=43.0.0-beta.1, <43.5.0 || >=44.0.0-alpha.1, <44.0.0-beta.6`, fixed in `42.10.0`, `43.5.0`, `44.0.0-beta.6` · CVSS 7.8 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-20, CWE-345
- [Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader](https://agentprime.io/advisories/CVE-2026-102711.md)
  `CVE-2026-102711` · CVE record: Eclipse Foundation Eclipse ThreadX · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-345, CWE-1284
- [Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation](https://agentprime.io/advisories/CVE-2026-101278.md)
  `CVE-2026-101278` · CVE record: Trusted Domain Project OpenDMARC · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-345, CWE-346
- [Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done](https://agentprime.io/advisories/CVE-2026-92996.md)
  `CVE-2026-92996` · CVE record: Unknown Verge3D Publishing and E-Commerce · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-345
- [Paymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent](https://agentprime.io/advisories/CVE-2026-89411.md)
  `CVE-2026-89411` · CVE record: Unknown Paymattic · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-345
- [FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider](https://agentprime.io/advisories/GHSA-g7vj-c29h-3h5m.md)
  `GHSA-g7vj-c29h-3h5m`, `CVE-2026-92161`, `PKSA-4zg4-dqk9-5wt7` · Packagist `fof/oauth`: affected `<1.7.4 || >=2.0.0-beta.1, <2.0.0-beta.4`, fixed in `1.7.4`, `2.0.0-beta.4` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-345
- [Botslab G980H Dashcams Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/CVE-2026-81630.md)
  `CVE-2026-81630` · CVE record: Botslab G980H · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-345
- [authentik: Authentication bypass via assertion confusion in SAML sources](https://agentprime.io/advisories/CVE-2026-94612.md)
  `CVE-2026-94612` · CVE record: goauthentik authentik · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, CWE-345
- [Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback](https://agentprime.io/advisories/CVE-2026-87978.md)
  `CVE-2026-87978` · CVE record: Unknown Paymob for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-345
- [MasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course Discussions](https://agentprime.io/advisories/CVE-2026-81338.md)
  `CVE-2026-81338` · CVE record: Unknown MasterStudy LMS WordPress Plugin · CVSS 4.6 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-345
- [SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-28324.md)
  `CVE-2026-28324` · CVE record: SolarWinds Observability Self-Hosted · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-345

Newest: <https://agentprime.io/advisories/tag/cwe-345.md>
Older: <https://agentprime.io/advisories/tag/cwe-345.md?cursor=WyIyMDI2LTA5LTIyVDE5OjExOjMzLjk5NzAwMFoiLCJDVkUtMjAyNi0yODMyNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-345&cursor=WyIyMDI2LTEwLTE1VDIwOjIyOjE4LjAwMDAwMFoiLCJHSFNBLWhxbTItY2Z4Mi0ydmdoIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-345/?cursor=WyIyMDI2LTEwLTE1VDIwOjIyOjE4LjAwMDAwMFoiLCJHSFNBLWhxbTItY2Z4Mi0ydmdoIl0>. Everything for agents: <https://agentprime.io/llms.txt>.