# CWE-345.

Every Advisory and CVE whose sources give the weakness CWE-345, newest first.

## Records, newest first (an older page)

- [AsyncSSH Rogue Extension Negotiation](https://agentprime.io/advisories/GHSA-cfc2-wr2v-gxm5.md)
  `GHSA-cfc2-wr2v-gxm5`, `CVE-2023-46445`, `PYSEC-2023-237` · PyPI `asyncssh`: affected `<2.14.1`, fixed in `2.14.1` · CVSS 5.3 Medium · Not analysed yet · Published 9 Nov 2023 · Tags: CWE-345, CWE-349, CWE-354
- [Insufficient verification of data authenticity in Google Chrome](https://agentprime.io/advisories/CVE-2023-5482.md)
  `CVE-2023-5482` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-345
- [Fake websocket server installation permits full takeover in Home Assistant Core](https://agentprime.io/advisories/CVE-2023-41896.md)
  `CVE-2023-41896` · CVE record: home-assistant core · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-345
- [Arbitrary URL load in Android WebView in \`MyActivity.kt\` in Home Assistant Companion for Android](https://agentprime.io/advisories/CVE-2023-41898.md)
  `CVE-2023-41898` · CVE record: home-assistant core · CVSS 8.6 High · Not analysed yet · Published 19 Oct 2023 · Tags: Code injection, CWE-345
- [Arduino Create Agent Insufficient Verification of Data Authenticity vulnerability](https://agentprime.io/advisories/GHSA-4x5q-q7wc-q22p.md)
  `GHSA-4x5q-q7wc-q22p`, `CVE-2023-43800` · Go `github.com/arduino/arduino-create-agent`: affected `<1.3.3`, fixed in `1.3.3` · CVSS 7.3 High · Not analysed yet · Published 18 Oct 2023 · Tags: CWE-345
- [Insufficient Verification of Data Authenticity in Apache InLong](https://agentprime.io/advisories/GHSA-wj6q-chpv-mcrx.md)
  `GHSA-wj6q-chpv-mcrx`, `CVE-2023-43666` · Maven `org.apache.inlong:inlong`: affected `>=1.4.0, <1.9.0`, fixed in `1.9.0` · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in Fortinet FortiAnalyzer](https://agentprime.io/advisories/CVE-2023-42782.md)
  `CVE-2023-42782` · CVE record: Fortinet FortiAnalyzer · CVSS 5.0 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-345
- [BIG-IP Edge Client for macOS vulnerability](https://agentprime.io/advisories/CVE-2023-5450.md)
  `CVE-2023-5450` · CVE record: F5 BIG-IP Edge Client · CVSS 7.3 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-345
- [Openvswitch don't match packets on nd_target field](https://agentprime.io/advisories/CVE-2023-5366.md)
  `CVE-2023-5366` · CVE record: openvswitch and 4 more · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2023 · Tags: CWE-345
- [Kubernetes users may update Pod labels to bypass network policy](https://agentprime.io/advisories/GHSA-gj2r-phwg-6rww.md)
  `GHSA-gj2r-phwg-6rww`, `BIT-cilium-2023-39347`, `BIT-cilium-operator-2023-39347`, `BIT-cilium-proxy-2023-39347`, `BIT-hubble-2023-39347`, `BIT-hubble-relay-2023-39347`, `BIT-hubble-ui-2023-39347`, `BIT-hubble-ui-backend-2023-39347`, `CVE-2023-39347`, `GO-2023-2078` · Go `github.com/cilium/cilium`: affected `<1.12.14 || >=1.13.0, <1.13.7 || >=1.14.0, <1.14.2`, fixed in `1.12.14`, `1.13.7`, `1.14.2` · CVSS 7.6 High · Not analysed yet · Published 26 Sept 2023 · Tags: CWE-345
- [Composer allows cache poisoning from other projects built on the same host](https://agentprime.io/advisories/GHSA-725m-w832-q973.md)
  `GHSA-725m-w832-q973`, `CVE-2015-8371`, `PKSA-qx8p-c3v3-6yfg` · Packagist `composer/composer`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2023 · Tags: CWE-345
- [Duplicate Advisory: EVE Doesn't Protect Rootfs](https://agentprime.io/advisories/GHSA-x9mp-jm4h-jjf8.md)
  `GHSA-x9mp-jm4h-jjf8` · Go `github.com/lf-edge/eve/pkg/grub`: affected `<0.0.0-20220708121648-5fef4d92e758`, fixed in `0.0.0-20220708121648-5fef4d92e758` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 20 Sept 2023 · Tags: CWE-345
- [sidekiq Denial of Service vulnerability](https://agentprime.io/advisories/GHSA-3qc2-v3hp-6cv8.md)
  `GHSA-3qc2-v3hp-6cv8`, `CVE-2023-26141` · RubyGems `sidekiq`: affected `<6.5.10 || >=7.0.0, <7.1.3`, fixed in `6.5.10`, `7.1.3` · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service, CWE-345
- [Insufficient verification of data authenticity vulnerability in Delinea Secret Server](https://agentprime.io/advisories/CVE-2023-4589.md)
  `CVE-2023-4589` · CVE record: Delinea Secret Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-345
- [ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-35719.md)
  `CVE-2023-35719` · CVE record: ManageEngine ADSelfService Plus · CVSS 6.8 Medium · EPSS 0.25 · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in Zoom Video Communications, Inc. Zoom Desktop Client for Windows](https://agentprime.io/advisories/CVE-2023-36541.md)
  `CVE-2023-36541` · CVE record: Zoom Video Communications, Inc. Zoom Desktop Client for Windows · CVSS 8.0 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-345
- [BIG-IP Edge Client for Windows and macOS vulnerability](https://agentprime.io/advisories/CVE-2023-36858.md)
  `CVE-2023-36858` · CVE record: F5 BIG-IP Edge Client · CVSS 7.1 High · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-345
- [Removal of e-Tugra root certificate](https://agentprime.io/advisories/GHSA-xqr8-7jwr-rhp7.md)
  `GHSA-xqr8-7jwr-rhp7`, `CVE-2023-37920`, `PYSEC-2023-135` · PyPI `certifi`: affected `>=2015.4.28, <2023.7.22`, fixed in `2023.7.22` · CVSS 7.5 High · Not analysed yet · Published 25 Jul 2023 · Tags: CWE-345
- [Lack of Dataset Integrity Checking](https://agentprime.io/advisories/CVE-2023-30562.md)
  `CVE-2023-30562` · CVE record: Becton Dickinson & Co BD Alarisâ„¢ Guardrailsâ„¢ Editor · CVSS 6.7 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-345
- [Wireless Card Firmware Improperly Signed](https://agentprime.io/advisories/CVE-2023-30559.md)
  `CVE-2023-30559` · CVE record: Becton Dickinson & Co BD Alaris™ Point-of-Care Unit (PCU) Model 8015 · CVSS 5.2 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-20, CWE-345
- [Controller design flaw - unsigned firmware](https://agentprime.io/advisories/CVE-2023-25178.md)
  `CVE-2023-25178` · CVE record: Honeywell C300 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-345
- [Pipelines do not validate child UIDs](https://agentprime.io/advisories/GHSA-w2h3-vvvq-3m53.md)
  `GHSA-w2h3-vvvq-3m53`, `CVE-2023-37264`, `GO-2023-1901` · Go `github.com/tektoncd/pipeline`: affected `>=0.35.0, <=0.52.0`, no fixed version yet · CVSS 3.7 Low · Not analysed yet · Published 7 Jul 2023 · Tags: CWE-345
- [Graylog vulnerable to insecure source port usage for DNS queries](https://agentprime.io/advisories/GHSA-g96c-x7rh-99r3.md)
  `GHSA-g96c-x7rh-99r3`, `CVE-2023-41045` · Maven `org.graylog2:graylog2-server`: affected `>=5.1.0, <5.1.3 || <5.0.9`, fixed in `5.1.3`, `5.0.9` · CVSS 3.7 Low · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-345
- [CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature](https://agentprime.io/advisories/CVE-2023-3325.md)
  `CVE-2023-3325` · CVE record: thoefter CMS Commander – Manage Multiple Sites · CVSS 8.1 High · Not analysed yet · Published 20 Jun 2023 · Tags: CWE-345
- [Improper backend communication allows access and manipulation of the telemetry data](https://agentprime.io/advisories/CVE-2023-3028.md)
  `CVE-2023-3028` · CVE record: Hangzhou Hopechart IoT Technology Co., Ltd. HQT401 · CVSS 8.6 High · Not analysed yet · Published 1 Jun 2023 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-345
- [Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature](https://agentprime.io/advisories/CVE-2023-2987.md)
  `CVE-2023-2987` · CVE record: wordapp Wordapp · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2023 · Tags: CWE-345
- [Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation](https://agentprime.io/advisories/GHSA-6v6h-rw43-97fh.md)
  `GHSA-6v6h-rw43-97fh`, `CVE-2023-32993` · Maven `io.jenkins.plugins:miniorange-saml-sp`: affected `<2.1.0`, fixed in `2.1.0` · CVSS 4.8 Medium · Not analysed yet · Published 16 May 2023 · Tags: CWE-345, CWE-346
- [AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.](https://agentprime.io/advisories/CVE-2023-28863.md)
  `CVE-2023-28863` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2023 · Tags: CWE-345
- [BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware.](https://agentprime.io/advisories/CVE-2023-27748.md)
  `CVE-2023-27748` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Apr 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in Pegasystems RPA: Synchronization Engine](https://agentprime.io/advisories/CVE-2023-26467.md)
  `CVE-2023-26467` · CVE record: Pegasystems RPA: Synchronization Engine · CVSS 8.1 High · Not analysed yet · Published 10 Apr 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2022-48431.md)
  `CVE-2022-48431` · CVE record: JetBrains IntelliJ IDEA · CVSS 4.5 Medium · Not analysed yet · Published 29 Mar 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others](https://agentprime.io/advisories/CVE-2023-27982.md)
  `CVE-2023-27982` · CVE record: Schneider Electric IGSS Data Server(IGSSdataServer.exe) and 2 more · CVSS 8.8 High · Not analysed yet · Published 21 Mar 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others](https://agentprime.io/advisories/CVE-2023-27979.md)
  `CVE-2023-27979` · CVE record: Schneider Electric IGSS Data Server(IGSSdataServer.exe) and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Mar 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others](https://agentprime.io/advisories/CVE-2023-27977.md)
  `CVE-2023-27977` · CVE record: Schneider Electric IGSS Data Server(IGSSdataServer.exe) and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Mar 2023 · Tags: CWE-345
- [Zerocoin libzerocoin Proof CoinSpend.cpp CoinSpend data authenticity](https://agentprime.io/advisories/CVE-2017-20180.md)
  `CVE-2017-20180` · CVE record: Zerocoin libzerocoin · CVSS 4.6 Medium · Not analysed yet · Published 6 Mar 2023 · Tags: CWE-345
- [Insufficient user check in FlowTokens by Email stage](https://agentprime.io/advisories/CVE-2023-26481.md)
  `CVE-2023-26481` · CVE record: goauthentik authentik · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2023 · Tags: CWE-345
- [Keycloak vulnerable to user impersonation via stolen UUID code](https://agentprime.io/advisories/GHSA-9g98-5mj6-f9mv.md)
  `GHSA-9g98-5mj6-f9mv`, `CVE-2023-0264` · Maven `org.keycloak:keycloak-services`: affected `<21.0.1`, fixed in `21.0.1` · CVSS 8.7 High · Not analysed yet · Published 2 Mar 2023 · Tags: Authentication bypass, CWE-345
- [Insufficient verification of data authenticity in Samsung Mobile Routine](https://agentprime.io/advisories/CVE-2023-21441.md)
  `CVE-2023-21441` · CVE record: Samsung Mobile Routine · CVSS 7.4 High · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-345
- [Payment information sent to PayPal not necessarily identical to created order](https://agentprime.io/advisories/GHSA-vxpm-8hcp-qh27.md)
  `GHSA-vxpm-8hcp-qh27`, `CVE-2023-23941`, `PKSA-28gs-3gbq-jx51` · Packagist `swag/paypal`: affected `<5.4.4`, fixed in `5.4.4` · CVSS 7.5 High · Not analysed yet · Published 3 Feb 2023 · Tags: CWE-345
- [OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature](https://agentprime.io/advisories/GHSA-626q-v9j4-mcp4.md)
  `GHSA-626q-v9j4-mcp4`, `CVE-2023-23940`, `PYSEC-2023-39` · PyPI `openzeppelin-cairo-contracts`: affected `>=0.2.0, <0.6.1`, fixed in `0.6.1` · CVSS 6.4 Medium · Not analysed yet · Published 2 Feb 2023 · Tags: Weak cryptography or TLS, CWE-345
- [Insufficient verification of data authenticity in Snap One Wattbox WB-300-IP-3](https://agentprime.io/advisories/CVE-2023-22315.md)
  `CVE-2023-22315` · CVE record: Snap One Wattbox WB-300-IP-3 · CVSS 6.7 Medium · Not analysed yet · Published 30 Jan 2023 · Tags: CWE-345
- [Rumpus - FTP server Improper Token Verification](https://agentprime.io/advisories/CVE-2022-46370.md)
  `CVE-2022-46370` · CVE record: Rumpus FTP server · CVSS 7.3 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in AMD 1st Gen EPYC and others](https://agentprime.io/advisories/CVE-2021-26403.md)
  `CVE-2021-26403` · CVE record: AMD 1st Gen EPYC and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in AMD 3rd Gen EPYC](https://agentprime.io/advisories/CVE-2021-26396.md)
  `CVE-2021-26396` · CVE record: AMD 3rd Gen EPYC · CVSS 4.4 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: CWE-345
- [Insufficient verification of data authenticity in NVIDIA GPU Display Driver for Windows](https://agentprime.io/advisories/CVE-2022-42267.md)
  `CVE-2022-42267` · CVE record: NVIDIA NVIDIA GPU Display Driver for Windows · CVSS 7.0 High · Not analysed yet · Published 30 Dec 2022 · Tags: CWE-345
- [Improper validation of UUIDs in github.com/codenotary/immudb](https://agentprime.io/advisories/GHSA-6cqj-6969-p57x.md)
  `GHSA-6cqj-6969-p57x`, `CVE-2022-39199`, `GO-2022-1118` · Go `github.com/codenotary/immudb`: affected `<1.4.1`, fixed in `1.4.1` · CVSS 5.8 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-345
- [CodeIgniter4 allows spoofing of IP address when using proxy](https://agentprime.io/advisories/GHSA-ghw3-5qvm-3mqc.md)
  `GHSA-ghw3-5qvm-3mqc`, `BIT-codeigniter-2022-23556`, `CVE-2022-23556`, `PKSA-5qsc-rptw-773m` · Packagist `codeigniter4/framework`: affected `<4.2.11`, fixed in `4.2.11` · CVSS 7.0 High · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-345
- [Insufficient verification of data authenticity in Mozilla Firefox](https://agentprime.io/advisories/CVE-2022-36315.md)
  `CVE-2022-36315` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-345
- [Insufficient verification of data authenticity in Mozilla Firefox](https://agentprime.io/advisories/CVE-2022-34471.md)
  `CVE-2022-34471` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-345
- [Insufficient verification of data authenticity in Mozilla Firefox](https://agentprime.io/advisories/CVE-2022-22757.md)
  `CVE-2022-22757` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-345
- [An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.](https://agentprime.io/advisories/CVE-2022-46422.md)
  `CVE-2022-46422` · CVE record · CVSS 4.8 Medium · Not analysed yet · Published 20 Dec 2022 · Tags: CWE-345
- [TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.](https://agentprime.io/advisories/CVE-2022-46139.md)
  `CVE-2022-46139` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 20 Dec 2022 · Tags: CWE-345
- [D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106…](https://agentprime.io/advisories/CVE-2022-38873.md)
  `CVE-2022-38873` · CVE record · CVSS 7.5 High · Not analysed yet · Published 20 Dec 2022 · Tags: CWE-345
- [BigBlueButton subject to Ineffective user bans](https://agentprime.io/advisories/CVE-2022-41961.md)
  `CVE-2022-41961` · CVE record: bigbluebutton bigbluebutton · CVSS 4.3 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-345, CWE-346
- [PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages.](https://agentprime.io/advisories/CVE-2022-26579.md)
  `CVE-2022-26579` · CVE record · CVSS 6.0 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-345
- [BigBlueButton contains DoS via failed authToken validation](https://agentprime.io/advisories/CVE-2022-41960.md)
  `CVE-2022-41960` · CVE record: bigbluebutton bigbluebutton · CVSS 4.3 Medium · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-345
- [RSFirewall < 1.1.25 - IP Block Bypass](https://agentprime.io/advisories/CVE-2021-4226.md)
  `CVE-2021-4226` · CVE record: Unknown RSFirewall! · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-345
- [Insufficient verification of data authenticity in Apple iCloud for Windows and others](https://agentprime.io/advisories/CVE-2022-46692.md)
  `CVE-2022-46692` · CVE record: Apple iCloud for Windows and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Dec 2022 · Tags: CWE-345
- [Insufficient verification of data authenticity in Samsung Mobile Samsung Gear IconX PC Manager](https://agentprime.io/advisories/CVE-2022-39909.md)
  `CVE-2022-39909` · CVE record: Samsung Mobile Samsung Gear IconX PC Manager · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-345
- [Certifi removing TrustCor root certificate](https://agentprime.io/advisories/GHSA-43fp-rhv2-5gv8.md)
  `GHSA-43fp-rhv2-5gv8`, `CVE-2022-23491`, `PYSEC-2022-42986` · PyPI `certifi`: affected `>=2017.11.05, <2022.12.07`, fixed in `2022.12.07` · CVSS 6.8 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-345

Newest: <https://agentprime.io/advisories/tag/cwe-345.md>
Older: <https://agentprime.io/advisories/tag/cwe-345.md?cursor=WyIyMDIyLTEyLTA3VDIzOjA1OjE4LjAwMDAwMFoiLCJHSFNBLTQzZnAtcmh2Mi01Z3Y4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-345&cursor=WyIyMDIzLTExLTA5VDE4OjM1OjE0LjAwMDAwMFoiLCJHSFNBLWMzNXEtZmZwZi01cXBtIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-345/?cursor=WyIyMDIzLTExLTA5VDE4OjM1OjE0LjAwMDAwMFoiLCJHSFNBLWMzNXEtZmZwZi01cXBtIl0>. Everything for agents: <https://agentprime.io/llms.txt>.