# CWE-405.

Every Advisory and CVE whose sources give the weakness CWE-405, newest first.

## Records, newest first

- [minimatch has potential denial of service via globparts amplification](https://agentprime.io/advisories/GHSA-g3hv-75wg-m249.md)
  `GHSA-g3hv-75wg-m249`, `CVE-2026-118764` · npm `minimatch`: affected `>=7.0.0, <11.0.1`, fixed in `11.0.1` · CVSS 6.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-405
- [pypdf has possible large memory usage for exceptions in strict mode](https://agentprime.io/advisories/GHSA-4vqv-7265-gm2w.md)
  `GHSA-4vqv-7265-gm2w`, `CVE-2026-119207` · PyPI `pypdf`: affected `<6.21.3`, fixed in `6.21.3` · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service, CWE-405
- [undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering](https://agentprime.io/advisories/GHSA-9fm3-97px-rjf6.md)
  `GHSA-9fm3-97px-rjf6`, `CVE-2026-109932` · npm `undici`: affected `>=5.15.0, <6.29.1 || >=7.0.0, <7.30.1 || >=8.0.0, <8.12.2`, fixed in `6.29.1`, `7.30.1`, `8.12.2` · CVSS 5.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Denial of service, CWE-405
- [Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key](https://agentprime.io/advisories/CVE-2026-85783.md)
  `CVE-2026-85783` · CVE record · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service, CWE-405
- [@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)](https://agentprime.io/advisories/GHSA-62vg-58rm-qff7.md)
  `GHSA-62vg-58rm-qff7`, `CVE-2026-111752` · npm `@angular/router`: affected `<=19.2.25 || >=20.0.0, <20.3.33 || >=21.0.0, <21.2.25 || >=22.0.0, <22.2.1`, fixed in `20.3.33`, `21.2.25`, `22.2.1` · CVSS 8.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service, CWE-405
- [Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum](https://agentprime.io/advisories/CVE-2026-110676.md)
  `CVE-2026-110676` · CVE record · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-405
- [Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-7hqp-7c5m-4vq6.md)
  `GHSA-7hqp-7c5m-4vq6`, `BIT-dotnet-2026-96960`, `BIT-dotnet-sdk-2026-96960`, `CVE-2026-96960` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.5`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-405
- [Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-2fmv-rv2c-59x7.md)
  `GHSA-2fmv-rv2c-59x7`, `CVE-2026-70162` · NuGet `System.Security.Cryptography.Pkcs`: affected `>=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.2`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-405
- [Misskey: Lack of rate limiting and size restrictions in RSS fetching API](https://agentprime.io/advisories/CVE-2026-104817.md)
  `CVE-2026-104817` · CVE record: misskey-dev misskey · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service, Server-side request forgery (SSRF), CWE-405
- [Excessive CPU consumption from repeated initial window changes in net/http](https://agentprime.io/advisories/GO-2026-6611.md)
  `GO-2026-6611`, `BIT-golang-2026-78669`, `CVE-2026-78669` · Go `golang.org/x/net` and 1 more: affected `<0.60.0`, fixed in `0.60.0` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-405
- [Reject malformed ECH outer extension references in crypto/tls](https://agentprime.io/advisories/GO-2026-6607.md)
  `GO-2026-6607`, `BIT-golang-2026-97031`, `CVE-2026-97031` · Go `stdlib`: affected `<1.26.9 || >=1.27.0-0, <1.27.2`, fixed in `1.26.9`, `1.27.2` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-405
- [HTTP/2 server memory exhaustion due to Trailer headers in net/http](https://agentprime.io/advisories/GO-2026-6603.md)
  `GO-2026-6603`, `BIT-golang-2026-78659`, `CVE-2026-78659` · Go `golang.org/x/net` and 1 more: affected `<0.60.0`, fixed in `0.60.0` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-405
- [IBM DataPower Gateway Denial of Service](https://agentprime.io/advisories/CVE-2026-15822.md)
  `CVE-2026-15822` · CVE record: IBM DataPower Gateway 10.6CD and 3 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-405
- [wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion](https://agentprime.io/advisories/CVE-2026-84897.md)
  `CVE-2026-84897` · CVE record: wolfSSL Inc. wolfSSH · CVSS 6.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service, CWE-372, CWE-405
- [Apache Struts: Disproportionate response size when rendering BigDecimal request parameters](https://agentprime.io/advisories/CVE-2026-104712.md)
  `CVE-2026-104712` · CVE record: Apache Software Foundation Apache Struts · CVSS 7.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-405
- [Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification](https://agentprime.io/advisories/CVE-2026-104431.md)
  `CVE-2026-104431` · CVE record: ZcashFoundation zebra · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-405
- [Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions](https://agentprime.io/advisories/CVE-2026-104425.md)
  `CVE-2026-104425` · CVE record: ZcashFoundation zebra · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-405
- [Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification](https://agentprime.io/advisories/CVE-2026-104423.md)
  `CVE-2026-104423` · CVE record: ZcashFoundation zebra · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-405
- [Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords](https://agentprime.io/advisories/CVE-2026-103880.md)
  `CVE-2026-103880` · CVE record: Apache Software Foundation Apache Directory LDAP API · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-405
- [Message parser retains every identical singleton RDATA, enabling wire-to-work amplification](https://agentprime.io/advisories/CVE-2026-75029.md)
  `CVE-2026-75029` · CVE record: ISC BIND 9 · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-405
- [Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search](https://agentprime.io/advisories/CVE-2026-68531.md)
  `CVE-2026-68531` · CVE record: Concrete CMS Concrete CMS · CVSS 2.1 Low · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-405
- [Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout](https://agentprime.io/advisories/GHSA-3g9q-v48f-hh9w.md)
  `GHSA-3g9q-v48f-hh9w`, `CVE-2026-87011`, `PYSEC-2026-4117` · PyPI `open-webui`: affected `>=0.9.0, <0.11.1`, fixed in `0.11.1` · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service, CWE-405
- [commonmark 2.0.0 before 2.8.4 Denial of Service via XML](https://agentprime.io/advisories/CVE-2026-86432.md)
  `CVE-2026-86432` · CVE record: thephpleague commonmark · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-405
- [Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries](https://agentprime.io/advisories/CVE-2026-82309.md)
  `CVE-2026-82309` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service, CWE-405
- [pypdf: Possible long runtimes/large memory usage when retrieving outlines](https://agentprime.io/advisories/GHSA-23w6-3w8w-8484.md)
  `GHSA-23w6-3w8w-8484`, `CVE-2026-84310`, `PYSEC-2026-3910` · PyPI `pypdf`: affected `<6.16.1`, fixed in `6.16.1` · CVSS 4.8 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service, CWE-405
- [decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input](https://agentprime.io/advisories/GHSA-vcc3-ghjq-m6fr.md)
  `GHSA-vcc3-ghjq-m6fr`, `CVE-2026-45822` · npm `decode-uri-component`: affected `<0.5.0`, fixed in `0.5.0` · CVSS 6.6 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Denial of service, CWE-405, CWE-1176
- [Excessive Memory Use Buffering DTLS Records for a Future Epoch](https://agentprime.io/advisories/CVE-2026-54874.md)
  `CVE-2026-54874` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-405
- [Frontend DoS via the validate.api.exists action](https://agentprime.io/advisories/CVE-2026-23934.md)
  `CVE-2026-23934` · CVE record: Zabbix Zabbix · CVSS 5.1 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-405
- [Frontend DoS via the popup.testtriggerexpr action](https://agentprime.io/advisories/CVE-2026-23930.md)
  `CVE-2026-23930` · CVE record: Zabbix Zabbix · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-405
- [Mastodon: Exhausting data by an unauthenticated request to the admin retention API](https://agentprime.io/advisories/CVE-2026-72914.md)
  `CVE-2026-72914` · CVE record: mastodon mastodon · CVSS 7.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Denial of service, CWE-405
- [league/commonmark: Denial of service via deeply nested XML output](https://agentprime.io/advisories/GHSA-mj63-m3rc-8ppr.md)
  `GHSA-mj63-m3rc-8ppr`, `PKSA-5mzr-szzf-z6cn` · Packagist `league/commonmark`: affected `>=2.0.0, <2.9.0`, fixed in `2.9.0` · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-405
- [AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock](https://agentprime.io/advisories/CVE-2025-32394.md)
  `CVE-2025-32394` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service, CWE-405
- [Denial of Service in UBB.threads](https://agentprime.io/advisories/CVE-2026-54224.md)
  `CVE-2026-54224` · CVE record: UBB Systems UBB.threads · CVSS 7.1 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-405
- [Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification](https://agentprime.io/advisories/CVE-2026-47774.md)
  `CVE-2026-47774` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: Denial of service, CWE-405, CWE-409
- [Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters](https://agentprime.io/advisories/CVE-2026-8594.md)
  `CVE-2026-8594` · CVE record: NEZUMI Text::LineFold · CVSS 6.2 Medium · Not analysed yet · Published 30 May 2026 · Tags: Denial of service, CWE-405
- [Nerdbank.MessagePack has a memory amplification DoS in collection deserialization](https://agentprime.io/advisories/GHSA-qjvr-435c-5fjh.md)
  `GHSA-qjvr-435c-5fjh` · NuGet `Nerdbank.MessagePack`: affected `<1.1.78`, fixed in `1.1.78` · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-405
- [Technitium DNS Server excessive DNSSEC requests](https://agentprime.io/advisories/CVE-2026-45557.md)
  `CVE-2026-45557` · CVE record: Technitium DNS Server · CVSS 6.9 Medium · Not analysed yet · Published 19 May 2026 · Tags: Denial of service, CWE-405, CWE-406
- [Deskflow: TLS multiplexer DoS on failed \`SSL_accept\`](https://agentprime.io/advisories/CVE-2026-44296.md)
  `CVE-2026-44296` · CVE record: deskflow deskflow · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Denial of service, CWE-405
- [Duplicate Advisory: OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling](https://agentprime.io/advisories/GHSA-36cp-mh65-x882.md)
  `GHSA-36cp-mh65-x882` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-405
- [OpenClaw has incomplete Fix for CVE-2026-32011: Feishu Webhook Pre-Auth Body Parsing DoS (Slow-Body / Slowloris Variant)](https://agentprime.io/advisories/GHSA-w6m8-cqvj-pg5v.md)
  `GHSA-w6m8-cqvj-pg5v`, `CVE-2026-35665` · npm `openclaw`: affected `<2026.3.24`, fixed in `2026.3.24` · CVSS 6.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Denial of service, CWE-405
- [OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling](https://agentprime.io/advisories/GHSA-rm59-992w-x2mv.md)
  `GHSA-rm59-992w-x2mv`, `CVE-2026-35626` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service, CWE-405
- [Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.](https://agentprime.io/advisories/CVE-2025-46598.md)
  `CVE-2025-46598` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-405
- [Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Server](https://agentprime.io/advisories/CVE-2026-25611.md)
  `CVE-2026-25611` · CVE record: MongoDB Inc MongoDB Server · CVSS 8.7 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-405
- [Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)](https://agentprime.io/advisories/CVE-2026-24324.md)
  `CVE-2026-24324` · CVE record: SAP_SE SAP BusinessObjects Business Intelligence Platform (AdminTools) · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-405
- [Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform](https://agentprime.io/advisories/CVE-2026-0485.md)
  `CVE-2026-0485` · CVE record: SAP_SE SAP BusinessObjects BI Platform · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-405
- [devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse](https://agentprime.io/advisories/GHSA-g2pg-6438-jwpf.md)
  `GHSA-g2pg-6438-jwpf`, `CVE-2026-22775` · npm `devalue`: affected `>=5.1.0, <5.6.2`, fixed in `5.6.2` · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-405
- [Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse](https://agentprime.io/advisories/GHSA-vw5p-8cq8-m7mv.md)
  `GHSA-vw5p-8cq8-m7mv`, `CVE-2026-22774` · npm `devalue`: affected `>=5.3.0, <5.6.2`, fixed in `5.6.2` · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-20, CWE-405
- [Marshmallow has DoS in Schema.load(many)](https://agentprime.io/advisories/GHSA-428g-f7cq-pgp5.md)
  `GHSA-428g-f7cq-pgp5`, `CVE-2025-68480`, `PYSEC-2026-1605` · PyPI `marshmallow`: affected `>=3.0.0rc1, <3.26.2 || >=4.0.0, <4.1.2`, fixed in `3.26.2`, `4.1.2` · CVSS 5.3 Medium · Not analysed yet · Published 22 Dec 2025 · Tags: CWE-405
- [Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)](https://agentprime.io/advisories/CVE-2025-42876.md)
  `CVE-2025-42876` · CVE record: SAP_SE SAP S/4 HANA Private Cloud (Financials General Ledger) · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-405
- [Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)](https://agentprime.io/advisories/CVE-2025-42874.md)
  `CVE-2025-42874` · CVE record: SAP_SE SAP NetWeaver (remote service for Xcelsius) · CVSS 7.9 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-405
- [Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)](https://agentprime.io/advisories/CVE-2025-42873.md)
  `CVE-2025-42873` · CVE record: SAP_SE SAPUI5 framework (Markdown-it component) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-405
- [Sigstore Timestamp Authority allocates excessive memory during request parsing](https://agentprime.io/advisories/GHSA-4qg8-fj49-pxjh.md)
  `GHSA-4qg8-fj49-pxjh`, `CVE-2025-66564`, `GO-2025-4192` · Go `github.com/sigstore/timestamp-authority`: affected `<2.0.3`, fixed in `2.0.3` · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-405
- [Fulcio allocates excessive memory during token parsing](https://agentprime.io/advisories/GHSA-f83f-xpx7-ffpw.md)
  `GHSA-f83f-xpx7-ffpw`, `CVE-2025-66506`, `GO-2025-4193` · Go `github.com/sigstore/fulcio`: affected `<1.8.3`, fixed in `1.8.3` · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-405
- [Frontend DoS vulnerability due to asymmetric resource consumption](https://agentprime.io/advisories/CVE-2025-49643.md)
  `CVE-2025-49643` · CVE record: Zabbix Zabbix · CVSS 6.0 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: CWE-405
- [Resource exhaustion via malformed DNSKEY handling](https://agentprime.io/advisories/CVE-2025-8677.md)
  `CVE-2025-8677` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 22 Oct 2025 · Tags: CWE-405
- [Atlassian Confluence Data Center: This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of…](https://agentprime.io/advisories/CVE-2025-22166.md)
  `CVE-2025-22166` · CVE record: Atlassian Confluence Data Center · CVSS 8.3 High · Not analysed yet · Published 21 Oct 2025 · Tags: CWE-405
- [CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)](https://agentprime.io/advisories/CVE-2025-26516.md)
  `CVE-2025-26516` · CVE record: NetApp StorageGRID · CVSS 5.3 Medium · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-405
- [HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack](https://agentprime.io/advisories/CVE-2025-31987.md)
  `CVE-2025-31987` · CVE record: HCL Software Connections Docs · CVSS 4.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-405
- [Chall-Manager's scenario decoding process does not check for zip bombs in github.com/ctfer-io/chall-manager](https://agentprime.io/advisories/GHSA-r7fm-3pqm-ww5w.md)
  `GHSA-r7fm-3pqm-ww5w`, `CVE-2025-53633`, `GO-2025-3810` · Go `github.com/ctfer-io/chall-manager`: affected `<0.1.4`, fixed in `0.1.4` · CVSS 8.7 High · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-405
- [net-imap rubygem vulnerable to possible DoS by memory exhaustion](https://agentprime.io/advisories/GHSA-j3g3-5qv5-52mj.md)
  `GHSA-j3g3-5qv5-52mj`, `CVE-2025-43857` · RubyGems `net-imap`: affected `<0.2.5 || >=0.3.0, <0.3.9 || >=0.4.0, <0.4.20 || >=0.5.0, <0.5.7`, fixed in `0.2.5`, `0.3.9`, `0.4.20`, `0.5.7` · CVSS 6.0 Medium · Not analysed yet · Published 28 Apr 2025 · Tags: Denial of service, CWE-405

Older: <https://agentprime.io/advisories/tag/cwe-405.md?cursor=WyIyMDI1LTA0LTI4VDE0OjE3OjMyLjAwMDAwMFoiLCJHSFNBLWozZzMtNXF2NS01Mm1qIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-405>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-405/>. Everything for agents: <https://agentprime.io/llms.txt>.