<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-390</title><description>Every new CWE-390 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-102280: Sandboxie-Plus: Sandbox containment bypass</title><link>https://agentprime.io/advisories/CVE-2026-102280/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102280/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 21:54:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-122192: Guest access to Firecracker process memory after a failed memory discard</title><link>https://agentprime.io/advisories/CVE-2026-122192/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-122192/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 19:35:51 GMT</pubDate><category>CVE</category></item><item><title>Django REST framework: TokenProxy.delete() reports success and revokes nothing</title><link>https://agentprime.io/advisories/GHSA-xw6w-gcfp-cf8m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xw6w-gcfp-cf8m/</guid><description>djangorestframework &gt;=3.12.0, &lt;3.18.2, fixed in 3.18.2. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 16:18:05 GMT</pubDate><category>PyPI</category><category>djangorestframework</category></item><item><title>CVE-2026-111823: Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.</title><link>https://agentprime.io/advisories/CVE-2026-111823/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111823/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 23:16:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-107275: @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed</title><link>https://agentprime.io/advisories/CVE-2026-107275/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107275/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 11:05:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104480: Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership</title><link>https://agentprime.io/advisories/CVE-2026-104480/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104480/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Oct 2026 00:57:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)</title><link>https://agentprime.io/advisories/CVE-2026-104002/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104002/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 21:05:55 GMT</pubDate><category>CVE</category></item><item><title>AsyncHttpClient doesn&apos;t verify SCRAM and Digest mutual-authentication responses</title><link>https://agentprime.io/advisories/GHSA-fj9w-c36g-h5x8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fj9w-c36g-h5x8/</guid><description>org.asynchttpclient:async-http-client &gt;=3.0.8, &lt;3.0.12, fixed in 3.0.12. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 17:18:39 GMT</pubDate><category>Maven</category><category>org.asynchttpclient:async-http-client</category></item><item><title>CVE-2026-29810: CyberPanel before 2.4.4 omits a &quot;return 0&quot; that is required by the business logic.</title><link>https://agentprime.io/advisories/CVE-2026-29810/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-29810/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 13 Sep 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76642: util-linux libmount Privilege Escalation via Failed Mount Helper</title><link>https://agentprime.io/advisories/CVE-2026-76642/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76642/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Sep 2026 10:54:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59845: Libssh: libssh: denial of service via unchecked proxycommand fork() failure</title><link>https://agentprime.io/advisories/CVE-2026-59845/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59845/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 11:26:43 GMT</pubDate><category>CVE</category></item><item><title>Apache Tomcat util accepted misconfigured CRLs</title><link>https://agentprime.io/advisories/GHSA-4x29-79gh-6v8q/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-4x29-79gh-6v8q/</guid><description>org.apache.tomcat:tomcat-util &gt;=11.0.0-M1, &lt;11.0.23 || &gt;=10.1.0-M7, &lt;10.1.56 || &gt;=9.0.83, &lt;9.0.119, fixed in 11.0.23, 10.1.56, 9.0.119. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 21:32:15 GMT</pubDate><category>Maven</category><category>org.apache.tomcat:tomcat-util</category><category>critical</category></item><item><title>CVE-2026-52989: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers</title><link>https://agentprime.io/advisories/CVE-2026-52989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52989/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jun 2026 16:29:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-48792: pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution</title><link>https://agentprime.io/advisories/CVE-2026-48792/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48792/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 19:55:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests</title><link>https://agentprime.io/advisories/CVE-2026-43493/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43493/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 10:44:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers</title><link>https://agentprime.io/advisories/GHSA-7c37-gx6w-8vc5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7c37-gx6w-8vc5/</guid><description>github.com/sigstore/gitsign &gt;=0.4.0, &lt;0.15.0, fixed in 0.15.0. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 17:37:45 GMT</pubDate><category>Go</category><category>github.com/sigstore/gitsign</category></item><item><title>CVE-2025-0029: Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SEV-SNP guest memory…</title><link>https://agentprime.io/advisories/CVE-2025-0029/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0029/</guid><description>CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Feb 2026 19:15:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46367: Dell Alienware Command Center: Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0…</title><link>https://agentprime.io/advisories/CVE-2025-46367/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46367/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Nov 2025 19:23:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-27039: Detection of Error Condition Without Action in Computer Vision</title><link>https://agentprime.io/advisories/CVE-2025-27039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27039/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Oct 2025 03:17:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-49841: Detection of Error Condition Without Action in Hypervisor</title><link>https://agentprime.io/advisories/CVE-2024-49841/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49841/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 May 2025 08:32:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-26465: Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled</title><link>https://agentprime.io/advisories/CVE-2025-26465/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26465/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Feb 2025 18:27:16 GMT</pubDate><category>CVE</category></item><item><title>`gh attestation verify` returns incorrect exit code during verification if no attestations are present</title><link>https://agentprime.io/advisories/GHSA-fgw4-v983-mgp8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fgw4-v983-mgp8/</guid><description>github.com/cli/cli/v2 &gt;=2.49.0, &lt;2.67.0, fixed in 2.67.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Feb 2025 17:19:14 GMT</pubDate><category>Go</category><category>github.com/cli/cli/v2</category></item><item><title>CVE-2024-12086: Rsync: rsync server leaks arbitrary client files</title><link>https://agentprime.io/advisories/CVE-2024-12086/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-12086/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jan 2025 17:37:54 GMT</pubDate><category>CVE</category></item><item><title>Under certain uncommon site configurations, a bug in the CKEditor 5 module can cause some image uploads to move the entire webroot to a different location on the file system. This could be exploite...</title><link>https://agentprime.io/advisories/GHSA-52jr-x6h6-xj6g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-52jr-x6h6-xj6g/</guid><description>drupal/core &gt;=10.0.0, &lt;10.2.10, fixed in 10.2.10. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 16:27:27 GMT</pubDate><category>Packagist</category><category>drupal/core</category></item><item><title>CVE-2024-30255: HTTP/2: CPU exhaustion due to CONTINUATION frame flood</title><link>https://agentprime.io/advisories/CVE-2024-30255/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-30255/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Apr 2024 19:41:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-27919: HTTP/2: memory exhaustion due to CONTINUATION frame flood</title><link>https://agentprime.io/advisories/CVE-2024-27919/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27919/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.84 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Apr 2024 14:30:11 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-20316: Cisco IOS XE Software: A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could…</title><link>https://agentprime.io/advisories/CVE-2024-20316/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20316/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Mar 2024 16:49:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-40391: Gerbv: An out-of-bounds write vulnerability exists in the drill format T-code tool number…</title><link>https://agentprime.io/advisories/CVE-2021-40391/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-40391/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Nov 2021 18:53:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2019-5051: An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4.</title><link>https://agentprime.io/advisories/CVE-2019-5051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-5051/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Jul 2019 18:43:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-7485: PostgreSQL: In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7…</title><link>https://agentprime.io/advisories/CVE-2017-7485/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-7485/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 May 2017 19:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>