# CWE-377.

Every Advisory and CVE whose sources give the weakness CWE-377, newest first.

## Records, newest first (an older page)

- [chidiwilliams buzz model_loader.py download_model temp file](https://agentprime.io/advisories/CVE-2024-10372.md)
  `CVE-2024-10372` · CVE record: chidiwilliams buzz · CVSS 2.0 Low · Not analysed yet · Published 25 Oct 2024 · Tags: CWE-377
- [Denial of Service vulnerability in ESET products for macOS](https://agentprime.io/advisories/CVE-2024-6654.md)
  `CVE-2024-6654` · CVE record: ESET, spol. s r.o. ESET Cyber Security and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-377
- [Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file](https://agentprime.io/advisories/CVE-2024-7358.md)
  `CVE-2024-7358` · CVE record: Point B Ltd Getscreen Agent · CVSS 8.5 High · Not analysed yet · Published 1 Aug 2024 · Tags: CWE-377, CWE-378
- [In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp.](https://agentprime.io/advisories/CVE-2024-34490.md)
  `CVE-2024-34490` · CVE record · CVSS 5.1 Medium · Not analysed yet · Published 5 May 2024 · Tags: CWE-377
- [Insecure temporary file in bpftrace](https://agentprime.io/advisories/CVE-2024-2313.md)
  `CVE-2024-2313` · CVE record: bpftrace bpftrace · CVSS 2.8 Low · Not analysed yet · Published 10 Mar 2024 · Tags: CWE-377
- [Insecure temporary file in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2024-23287.md)
  `CVE-2024-23287` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-377
- [Spring Cloud Contract vulnerable to local information disclosure](https://agentprime.io/advisories/GHSA-p6rp-mx85-m459.md)
  `GHSA-p6rp-mx85-m459`, `CVE-2024-22236` · Maven `org.springframework.cloud:spring-cloud-contract-shade`: affected `>=4.1.0, <4.1.1 || >=4.0.0, <4.0.5 || >=3.1.0, <3.1.10`, fixed in `4.1.1`, `4.0.5`, `3.1.10` · CVSS 3.3 Low · Not analysed yet · Published 31 Jan 2024 · Tags: Broken access control, CWE-377
- [Resource exposure in Ubuntu Budgie Budgie Extras](https://agentprime.io/advisories/CVE-2023-49347.md)
  `CVE-2023-49347` · CVE record: Ubuntu Budgie Budgie Extras · CVSS 6.0 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: Information disclosure, CWE-377
- [Insecure temporary file in Ubuntu Budgie Budgie Extras](https://agentprime.io/advisories/CVE-2023-49346.md)
  `CVE-2023-49346` · CVE record: Ubuntu Budgie Budgie Extras · CVSS 6.0 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: Information disclosure, CWE-377
- [Resource exposure in Ubuntu Budgie Budgie Extras](https://agentprime.io/advisories/CVE-2023-49345.md)
  `CVE-2023-49345` · CVE record: Ubuntu Budgie Budgie Extras · CVSS 6.0 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: Information disclosure, CWE-377
- [Insecure temporary file in Ubuntu Budgie Budgie Extras](https://agentprime.io/advisories/CVE-2023-49344.md)
  `CVE-2023-49344` · CVE record: Ubuntu Budgie Budgie Extras · CVSS 6.0 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: Information disclosure, CWE-377
- [Insecure temporary file in Ubuntu Budgie Budgie Extras](https://agentprime.io/advisories/CVE-2023-49342.md)
  `CVE-2023-49342` · CVE record: Ubuntu Budgie Budgie Extras · CVSS 6.0 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: Information disclosure, CWE-377
- [Jenkins temporary uploaded file created with insecure permissions](https://agentprime.io/advisories/GHSA-hq87-h4jg-vxfw.md)
  `GHSA-hq87-h4jg-vxfw`, `BIT-jenkins-2023-43498`, `CVE-2023-43498` · Maven `org.jenkins-ci.main:jenkins-core`: affected `>=2.50, <2.414.2 || >=2.415, <2.424`, fixed in `2.414.2`, `2.424` · CVSS 3.6 Low · Not analysed yet · Published 20 Sept 2023 · Tags: CWE-377
- [Active Support Possibly Discloses Locally Encrypted Files](https://agentprime.io/advisories/GHSA-cr5q-6q9f-rq6q.md)
  `GHSA-cr5q-6q9f-rq6q`, `CVE-2023-38037` · RubyGems `activesupport`: affected `>=5.2.0, <6.1.7.5 || >=7.0.0, <7.0.7.1`, fixed in `6.1.7.5`, `7.0.7.1` · CVSS 5.5 Medium · Not analysed yet · Published 23 Aug 2023 · Tags: Broken access control, CWE-377
- [Insecure Temporary File in HuTool](https://agentprime.io/advisories/GHSA-7mcw-xmx3-7p8m.md)
  `GHSA-7mcw-xmx3-7p8m`, `CVE-2023-33695` · Maven `cn.hutool:hutool-core`: affected `<5.8.19`, fixed in `5.8.19` · CVSS 7.1 High · Not analysed yet · Published 13 Jun 2023 · Tags: Broken access control, CWE-377
- [Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.](https://agentprime.io/advisories/GHSA-282v-666c-3fvg.md)
  `GHSA-282v-666c-3fvg`, `CVE-2023-2800`, `PYSEC-2023-299` · PyPI `transformers`: affected `<4.30.0`, fixed in `4.30.0` · CVSS 4.7 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-377
- [Insecure temporary file in Dell SupportAssist](https://agentprime.io/advisories/CVE-2022-34387.md)
  `CVE-2022-34387` · CVE record: Dell SupportAssist · CVSS 6.4 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-377
- [Java Merge-sort Insecure Temporary File vulnerability](https://agentprime.io/advisories/GHSA-qxxc-7mq4-mf79.md)
  `GHSA-qxxc-7mq4-mf79`, `CVE-2022-24913` · Maven `com.fasterxml.util:java-merge-sort`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 5.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Information disclosure, CWE-377
- [globalpom-utils has Insecure Temporary File](https://agentprime.io/advisories/GHSA-jjvp-wfp8-rv69.md)
  `GHSA-jjvp-wfp8-rv69`, `CVE-2018-25068` · Maven `com.anrisoftware.globalpom:globalpomutils`: affected `<4.5.1`, fixed in `4.5.1` · CVSS 6.3 Medium · Not analysed yet · Published 6 Jan 2023 · Tags: Information disclosure, CWE-377
- [centic9 jgit-cookbook temp file](https://agentprime.io/advisories/CVE-2022-4817.md)
  `CVE-2022-4817` · CVE record: centic9 jgit-cookbook · CVSS 3.1 Low · Not analysed yet · Published 28 Dec 2022 · Tags: CWE-377
- [Insecure temporary file in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2022-26386.md)
  `CVE-2022-26386` · CVE record: Mozilla Firefox ESR and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-377
- [pig-vector LogisticRegression.java LogisticRegression temp file](https://agentprime.io/advisories/CVE-2022-4641.md)
  `CVE-2022-4641` · CVE record: unspecified pig-vector · CVSS 2.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-377
- [Temporary File Information Disclosure vulnerability in MPXJ](https://agentprime.io/advisories/GHSA-jf2p-4gqj-849g.md)
  `GHSA-jf2p-4gqj-849g`, `CVE-2022-41954`, `PYSEC-2022-42996` · Maven `net.sf.mpxj:mpxj` and 4 more: affected `<10.14.1`, fixed in `10.14.1` · CVSS 3.3 Low · Not analysed yet · Published 28 Nov 2022 · Tags: Information disclosure, CWE-377
- [TemporaryFolder on unix-like systems does not limit access to created files](https://agentprime.io/advisories/GHSA-562r-vg33-8x8h.md)
  `GHSA-562r-vg33-8x8h`, `BIT-postgresql-jdbc-driver-2022-41946`, `CVE-2022-41946` · Maven `org.postgresql:postgresql`: affected `>=42.2.0, <42.2.27 || >=42.3.0, <42.3.8 || >=42.4.0, <42.4.3 || >=42.5.0, <42.5.1`, fixed in `42.2.27`, `42.3.8`, `42.4.3`, `42.5.1` · CVSS 4.7 Medium · Not analysed yet · Published 23 Nov 2022 · Tags: Information disclosure, CWE-377
- [OpenKM FileUtils.java getFileExtension temp file](https://agentprime.io/advisories/CVE-2022-3969.md)
  `CVE-2022-3969` · CVE record: unspecified OpenKM · CVSS 2.6 Low · Not analysed yet · Published 13 Nov 2022 · Tags: CWE-377
- [ManyDesigns Portofino subject to creation of insecure temporary file](https://agentprime.io/advisories/GHSA-925r-r6rp-2jj7.md)
  `GHSA-925r-r6rp-2jj7`, `CVE-2022-3952` · Maven `com.manydesigns:portofino`: affected `<5.3.3`, fixed in `5.3.3` · CVSS 2.6 Low · Not analysed yet · Published 11 Nov 2022 · Tags: Information disclosure, CWE-377
- [Insecure temporary file in Red Hat Openshift](https://agentprime.io/advisories/CVE-2013-4253.md)
  `CVE-2013-4253` · CVE record: Red Hat Openshift · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-377
- [In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user.](https://agentprime.io/advisories/CVE-2017-20147.md)
  `CVE-2017-20147` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 20 Sept 2022 · Tags: CWE-377
- [ansible-runner vulnerable to Race Condition](https://agentprime.io/advisories/GHSA-772j-xvf9-qpf5.md)
  `GHSA-772j-xvf9-qpf5`, `CVE-2021-3702`, `PYSEC-2022-43068` · PyPI `ansible-runner`: affected `>=2.0.0, <2.1.0`, fixed in `2.1.0` · CVSS 6.3 Medium · Not analysed yet · Published 24 Aug 2022 · Tags: Race condition, CWE-377
- [Filesystem race on temporary files](https://agentprime.io/advisories/CVE-2022-35631.md)
  `CVE-2022-35631` · CVE record: Rapid7 Velociraptor · No CVSS score · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-377
- [Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot](https://agentprime.io/advisories/GHSA-cm59-pr5q-cw85.md)
  `GHSA-cm59-pr5q-cw85`, `CVE-2022-27772` · Maven `org.springframework.boot:spring-boot`: affected `<2.2.11.RELEASE`, fixed in `2.2.11.RELEASE` · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2022 · Tags: Information disclosure, CWE-377, CWE-379
- [Insecure temporary file in openshift-origin-msg-node-mcollective](https://agentprime.io/advisories/CVE-2013-4561.md)
  `CVE-2013-4561` · CVE record: openshift-origin-msg-node-mcollective · No CVSS score · Not analysed yet · Published 30 Jun 2022 · Tags: CWE-377
- [phpMyAdmin unsafely handles temporary files](https://agentprime.io/advisories/GHSA-9645-6g72-2pv8.md)
  `GHSA-9645-6g72-2pv8`, `CVE-2008-7252`, `PKSA-vvtr-znb6-rqfm` · Packagist `phpmyadmin/phpmyadmin`: affected `>=2.11.0, <2.11.10`, fixed in `2.11.10` · No CVSS score · Not analysed yet · Published 17 May 2022 · Tags: CWE-377
- [RPLY Predictable Tmpfile Names Allows Cache Spoofing](https://agentprime.io/advisories/GHSA-9gcf-pq99-rjw3.md)
  `GHSA-9gcf-pq99-rjw3`, `CVE-2014-1604`, `PYSEC-2014-117`, `PYSEC-2014-17` · PyPI `rply`: affected `<0.7.1`, fixed in `0.7.1` · No CVSS score · Not analysed yet · Published 17 May 2022 · Tags: CWE-377
- [Puppet uses predictable filenames, allowing arbitrary file overwrite](https://agentprime.io/advisories/GHSA-c4mc-49hq-q275.md)
  `GHSA-c4mc-49hq-q275`, `CVE-2012-1906` · RubyGems `puppet`: affected `>=2.6, <2.6.15 || >=2.7, <2.7.13`, fixed in `2.6.15`, `2.7.13` · No CVSS score · Not analysed yet · Published 14 May 2022 · Tags: CWE-377
- [keycloak-httpd-client-install symlink attack vulnerability](https://agentprime.io/advisories/GHSA-vqf9-v3hc-wr54.md)
  `GHSA-vqf9-v3hc-wr54`, `CVE-2017-15111`, `PYSEC-2026-829` · PyPI `keycloak-httpd-client-install`: affected `<0.8`, fixed in `0.8` · CVSS 5.5 Medium · Not analysed yet · Published 14 May 2022 · Tags: Path traversal, CWE-377
- [instack-undercloud vulnerable to symlink attack on tmp files](https://agentprime.io/advisories/GHSA-53wm-97p6-582f.md)
  `GHSA-53wm-97p6-582f`, `CVE-2017-7549`, `PYSEC-2017-152`, `PYSEC-2026-645` · PyPI `instack-undercloud`: affected `<=7.2.0`, no fixed version yet · CVSS 6.4 Medium · Not analysed yet · Published 13 May 2022 · Tags: Path traversal, CWE-377
- [Insecure temporary file in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-21809.md)
  `CVE-2022-21809` · CVE record: InHand Networks InRouter302 · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2022 · Tags: CWE-377
- [ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name](https://agentprime.io/advisories/GHSA-8mvw-22r7-w6fq.md)
  `GHSA-8mvw-22r7-w6fq`, `CVE-2013-0162` · RubyGems `ruby_parser`: affected `>=2.0.2, <3.1.2`, fixed in `3.1.2` · No CVSS score · Not analysed yet · Published 5 May 2022 · Tags: CWE-377
- [Hadoop symlink vulnerability](https://agentprime.io/advisories/GHSA-v5c9-98f7-2h54.md)
  `GHSA-v5c9-98f7-2h54`, `CVE-2012-2945` · Maven `org.apache.hadoop:hadoop-main`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2022 · Tags: Path traversal, CWE-377
- [Insecure Temporary File in SWHKD](https://agentprime.io/advisories/GHSA-p4jg-pccf-h82c.md)
  `GHSA-p4jg-pccf-h82c`, `CVE-2022-27815` · crates.io `Simple-Wayland-HotKey-Daemon`: affected `<1.2.0`, fixed in `1.2.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2022 · Tags: Path traversal, CWE-377
- [Use of insecure temporary file in Horovod](https://agentprime.io/advisories/GHSA-47wv-vhj2-g66m.md)
  `GHSA-47wv-vhj2-g66m`, `CVE-2022-0315`, `PYSEC-2022-175` · PyPI `horovod`: affected `<0.24.0`, fixed in `0.24.0` · CVSS 8.2 High · Not analysed yet · Published 29 Mar 2022 · Tags: Information disclosure, CWE-377
- [Data-transfer-project information disclosure via tmp directory](https://agentprime.io/advisories/CVE-2021-22572.md)
  `CVE-2021-22572` · CVE record: Google LLC Data-Transfer-Project · CVSS 5.5 Medium · Not analysed yet · Published 29 Mar 2022 · Tags: CWE-377
- [Temporary Directory Hijacking Vulnerability in Keycloak](https://agentprime.io/advisories/GHSA-6xp6-fmc8-pmmr.md)
  `GHSA-6xp6-fmc8-pmmr`, `CVE-2021-20202` · Maven `org.keycloak:keycloak-core`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 7.3 High · Not analysed yet · Published 18 Mar 2022 · Tags: CWE-377
- [cscreen: usage of fixed path /tmp/cscreen.debug](https://agentprime.io/advisories/CVE-2022-21945.md)
  `CVE-2022-21945` · CVE record: openSUSE Factory · CVSS 5.1 Medium · Not analysed yet · Published 16 Mar 2022 · Tags: CWE-377
- [grub2-once uses fixed file name in /var/tmp](https://agentprime.io/advisories/CVE-2021-46705.md)
  `CVE-2021-46705` · CVE record: SUSE SUSE Linux Enterprise Server 15 SP4 and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 16 Mar 2022 · Tags: CWE-377
- [Insecure Temporary File in mlflow](https://agentprime.io/advisories/GHSA-vqj2-4v8m-8vrq.md)
  `GHSA-vqj2-4v8m-8vrq`, `BIT-mlflow-2022-0736`, `CVE-2022-0736`, `PYSEC-2022-28` · PyPI `mlflow`: affected `<1.23.1`, fixed in `1.23.1` · CVSS 8.2 High · Not analysed yet · Published 24 Feb 2022 · Tags: Information disclosure, CWE-377
- [Hub Package Arbitrary File Overwrite](https://agentprime.io/advisories/GHSA-x5m6-jh4r-34mv.md)
  `GHSA-x5m6-jh4r-34mv`, `CVE-2014-0177` · Go `github.com/github/hub` and 1 more: affected `<1.12.1`, fixed in `1.12.1` · CVSS 4.4 Medium · Not analysed yet · Published 15 Feb 2022 · Tags: CWE-377
- [Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible](https://agentprime.io/advisories/GHSA-vp9j-rghq-8jhh.md)
  `GHSA-vp9j-rghq-8jhh`, `CVE-2020-10744`, `PYSEC-2020-208` · PyPI `ansible`: affected `<2.9.12 || >=2.10.0a1, <2.10.0rc1`, fixed in `2.9.12`, `2.10.0rc1` · CVSS 5.0 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: Race condition, Information disclosure, CWE-377
- [Insecure temporary file in caml-light](https://agentprime.io/advisories/CVE-2011-4119.md)
  `CVE-2011-4119` · CVE record: caml-light · No CVSS score · Not analysed yet · Published 26 Oct 2021 · Tags: CWE-377
- [Insecure temporary file in go/golang](https://agentprime.io/advisories/CVE-2012-2666.md)
  `CVE-2012-2666` · CVE record: go/golang · No CVSS score · Not analysed yet · Published 9 Jul 2021 · Tags: CWE-377
- [Insecure temporary file used in com.squareup:connect](https://agentprime.io/advisories/GHSA-q4hm-fwc9-hmv6.md)
  `GHSA-q4hm-fwc9-hmv6`, `CVE-2021-23331` · Maven `com.squareup:connect`: affected `<=2.20191120.0`, no fixed version yet · CVSS 4.4 Medium · Not analysed yet · Published 16 Jun 2021 · Tags: CWE-377
- [Insecure temporary file in Versa VOS](https://agentprime.io/advisories/CVE-2018-16494.md)
  `CVE-2018-16494` · CVE record: Versa VOS · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-377
- [Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code](https://agentprime.io/advisories/GHSA-cqxr-xf2w-943w.md)
  `GHSA-cqxr-xf2w-943w`, `CVE-2021-21430` · Maven `org.openapitools:openapi-generator`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2021 · Tags: Privilege escalation, Information disclosure, CWE-377, CWE-378
- [Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator](https://agentprime.io/advisories/GHSA-23x4-m842-fmwf.md)
  `GHSA-23x4-m842-fmwf`, `CVE-2021-21428` · Maven `org.openapitools:openapi-generator-online`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2021 · Tags: Privilege escalation, Information disclosure, CWE-377, CWE-378
- [Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin](https://agentprime.io/advisories/GHSA-867q-77cc-98mv.md)
  `GHSA-867q-77cc-98mv`, `CVE-2021-21429` · Maven `org.openapitools:openapi-generator-maven-plugin`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 4.0 Medium · Not analysed yet · Published 29 Apr 2021 · Tags: Information disclosure, CWE-377, CWE-378, CWE-379
- [Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File](https://agentprime.io/advisories/GHSA-g4mq-6fp5-qwcf.md)
  `GHSA-g4mq-6fp5-qwcf`, `CVE-2020-1733`, `PYSEC-2020-5` · PyPI `ansible`: affected `<2.7.17 || >=2.8.0a1, <2.8.11 || >=2.9.0a1, <2.9.7`, fixed in `2.7.17`, `2.8.11`, `2.9.7` · CVSS 5.0 Medium · Not analysed yet · Published 20 Apr 2021 · Tags: Race condition, Information disclosure, CWE-377
- [Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools](https://agentprime.io/advisories/CVE-2021-25316.md)
  `CVE-2021-25316` · CVE record: SUSE SUSE Linux Enterprise Server 12-SP5 and 1 more · CVSS 3.3 Low · Not analysed yet · Published 14 Apr 2021 · Tags: CWE-377
- [Information disclosure through temporary directory permissions](https://agentprime.io/advisories/CVE-2021-29429.md)
  `CVE-2021-29429` · CVE record: gradle gradle · CVSS 4.0 Medium · Not analysed yet · Published 12 Apr 2021 · Tags: CWE-377
- [Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible](https://agentprime.io/advisories/GHSA-vcg8-98q8-g7mj.md)
  `GHSA-vcg8-98q8-g7mj`, `CVE-2020-1740`, `PYSEC-2020-12` · PyPI `ansible`: affected `<2.7.17 || >=2.8.0a1, <2.8.11 || >=2.9.0a1, <2.9.7`, fixed in `2.7.17`, `2.8.11`, `2.9.7` · CVSS 3.9 Low · Not analysed yet · Published 7 Apr 2021 · Tags: Information disclosure, CWE-377

Newest: <https://agentprime.io/advisories/tag/cwe-377.md>
Older: <https://agentprime.io/advisories/tag/cwe-377.md?cursor=WyIyMDIxLTA0LTA3VDIxOjQ3OjMxLjAwMDAwMFoiLCJHSFNBLXZjZzgtOThxOC1nN21qIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-377&cursor=WyIyMDI0LTExLTEzVDE0OjE1OjA5LjM1NDAwMFoiLCJDVkUtMjAyNC00OTUwNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-377/?cursor=WyIyMDI0LTExLTEzVDE0OjE1OjA5LjM1NDAwMFoiLCJDVkUtMjAyNC00OTUwNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.