<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-372</title><description>Every new CWE-372 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Yielding in a component start function can lead to a host panic</title><link>https://agentprime.io/advisories/GHSA-5hhx-4wrr-3j9g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5hhx-4wrr-3j9g/</guid><description>wasmtime &gt;=46.0.0, &lt;48.0.6 || &gt;=49.0.0, &lt;49.0.3, fixed in 48.0.6, 49.0.3. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 12:00:00 GMT</pubDate><category>crates.io</category><category>wasmtime</category></item><item><title>CVE-2023-54406: Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts</title><link>https://agentprime.io/advisories/CVE-2023-54406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-54406/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Oct 2026 22:21:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84897: wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion</title><link>https://agentprime.io/advisories/CVE-2026-84897/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84897/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 02:42:28 GMT</pubDate><category>CVE</category></item><item><title>OpenClaw: Endpoint persists after trust decline, leaking gateway credentials</title><link>https://agentprime.io/advisories/GHSA-9f4w-67g7-mqwv/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9f4w-67g7-mqwv/</guid><description>openclaw &lt;2026.3.31, fixed in 2026.3.31. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 03:26:14 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts</title><link>https://agentprime.io/advisories/GHSA-f693-58pc-2gfr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-f693-58pc-2gfr/</guid><description>openclaw &lt;2026.3.31, fixed in 2026.3.31. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 03:20:58 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config</title><link>https://agentprime.io/advisories/GHSA-3pm9-5j7m-59vc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3pm9-5j7m-59vc/</guid><description>openclaw &lt;2026.3.31, fixed in 2026.3.31. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 03:20:16 GMT</pubDate><category>npm</category><category>openclaw</category></item><item><title>CVE-2024-22590: The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection.</title><link>https://agentprime.io/advisories/CVE-2024-22590/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22590/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 May 2024 16:07:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-4012: Incomplete Internal State Distinction in ntpsec</title><link>https://agentprime.io/advisories/CVE-2023-4012/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4012/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Aug 2023 17:30:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-36834: Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS</title><link>https://agentprime.io/advisories/CVE-2023-36834/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-36834/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Jul 2023 17:04:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-31127: DMTF-2023-0001: SPDM mutual authentication bypass</title><link>https://agentprime.io/advisories/CVE-2023-31127/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-31127/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 May 2023 20:05:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Access Restriction Bypass in kube-apiserver</title><link>https://agentprime.io/advisories/GHSA-g42g-737j-qx6j/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g42g-737j-qx6j/</guid><description>k8s.io/kubernetes &lt;1.18.18 || &gt;=1.19.0, &lt;1.19.10 || &gt;=1.20.0, &lt;1.20.6, fixed in 1.18.18, 1.19.10, 1.20.6. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 28 May 2021 19:49:59 GMT</pubDate><category>Go</category><category>k8s.io/kubernetes</category></item><item><title>CVE-2020-27222: The Eclipse Foundation Eclipse Californium: In Eclipse Californium version 2.3.0 to 2.6.0…</title><link>https://agentprime.io/advisories/CVE-2020-27222/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-27222/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Feb 2021 15:45:13 GMT</pubDate><category>CVE</category></item></channel></rss>