agentprime: CWE-405

minimatch has potential denial of service via globparts amplification

Fri, 30 Oct 2026 23:09:55 GMT

minimatch >=7.0.0, <11.0.1, fixed in 11.0.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible large memory usage for exceptions in strict mode

Fri, 30 Oct 2026 23:08:39 GMT

pypdf <6.21.3, fixed in 6.21.3. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

Tue, 27 Oct 2026 19:02:15 GMT

undici >=5.15.0, <6.29.1 || >=7.0.0, <7.30.1 || >=8.0.0, <8.12.2, fixed in 6.29.1, 7.30.1, 8.12.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-85783: Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key

Tue, 20 Oct 2026 21:29:03 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

Tue, 20 Oct 2026 14:36:39 GMT

@angular/router <=19.2.25 || >=20.0.0, <20.3.33 || >=21.0.0, <21.2.25 || >=22.0.0, <22.2.1, fixed in 20.3.33, 21.2.25, 22.2.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-110676: Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum

Mon, 19 Oct 2026 18:11:45 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:26:27 GMT

System.Security.Cryptography.Xml >=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability

Tue, 13 Oct 2026 20:07:20 GMT

System.Security.Cryptography.Pkcs >=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.2, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-104817: Misskey: Lack of rate limiting and size restrictions in RSS fetching API

Tue, 13 Oct 2026 18:39:30 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Excessive CPU consumption from repeated initial window changes in net/http

Thu, 08 Oct 2026 22:31:09 GMT

golang.org/x/net <0.60.0, fixed in 0.60.0. CVSS 7.5 (High). Published by OSV. Not analysed by agentprime yet.

Reject malformed ECH outer extension references in crypto/tls

Thu, 08 Oct 2026 22:31:09 GMT

stdlib <1.26.9 || >=1.27.0-0, <1.27.2, fixed in 1.26.9, 1.27.2. CVSS 7.5 (High). Published by OSV. Not analysed by agentprime yet.

HTTP/2 server memory exhaustion due to Trailer headers in net/http

Thu, 08 Oct 2026 22:31:09 GMT

golang.org/x/net <0.60.0, fixed in 0.60.0. CVSS 7.5 (High). Published by OSV. Not analysed by agentprime yet.

CVE-2026-15822: IBM DataPower Gateway Denial of Service

Thu, 08 Oct 2026 13:30:03 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84897: wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

Wed, 07 Oct 2026 02:42:28 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104712: Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Mon, 05 Oct 2026 18:35:41 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104431: Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

Fri, 02 Oct 2026 11:38:10 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104425: Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions

Fri, 02 Oct 2026 11:38:06 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104423: Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Fri, 02 Oct 2026 11:38:05 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103880: Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords

Fri, 02 Oct 2026 10:03:48 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

Wed, 16 Sep 2026 14:15:12 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68531: Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search

Tue, 15 Sep 2026 19:03:38 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

Thu, 10 Sep 2026 22:44:42 GMT

open-webui >=0.9.0, <0.11.1, fixed in 0.11.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-86432: commonmark 2.0.0 before 2.8.4 Denial of Service via XML

Mon, 07 Sep 2026 12:53:51 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82309: Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries

Fri, 04 Sep 2026 12:21:11 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

pypdf: Possible long runtimes/large memory usage when retrieving outlines

Tue, 01 Sep 2026 21:28:37 GMT

pypdf <6.16.1, fixed in 6.16.1. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

Mon, 31 Aug 2026 22:10:20 GMT

decode-uri-component <0.5.0, fixed in 0.5.0. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch

Tue, 25 Aug 2026 12:59:17 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23934: Frontend DoS via the validate.api.exists action

Tue, 18 Aug 2026 12:18:53 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23930: Frontend DoS via the popup.testtriggerexpr action

Tue, 18 Aug 2026 12:17:01 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72914: Mastodon: Exhausting data by an unauthenticated request to the admin retention API

Mon, 10 Aug 2026 21:13:20 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

league/commonmark: Denial of service via deeply nested XML output

Thu, 06 Aug 2026 20:42:54 GMT

league/commonmark >=2.0.0, <2.9.0, fixed in 2.9.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-32394: AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

Fri, 26 Jun 2026 16:11:20 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54224: Denial of Service in UBB.threads

Thu, 18 Jun 2026 12:56:24 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47774: Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification

Wed, 17 Jun 2026 16:58:36 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8594: Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters

Sat, 30 May 2026 15:32:30 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Nerdbank.MessagePack has a memory amplification DoS in collection deserialization

Fri, 29 May 2026 19:55:09 GMT

Nerdbank.MessagePack <1.1.78, fixed in 1.1.78. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-45557: Technitium DNS Server excessive DNSSEC requests

Tue, 19 May 2026 13:47:47 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44296: Deskflow: TLS multiplexer DoS on failed `SSL_accept`

Tue, 12 May 2026 20:52:59 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling

Fri, 10 Apr 2026 00:30:30 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw has incomplete Fix for CVE-2026-32011: Feishu Webhook Pre-Auth Body Parsing DoS (Slow-Body / Slowloris Variant)

Mon, 30 Mar 2026 18:32:03 GMT

openclaw <2026.3.24, fixed in 2026.3.24. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling

Thu, 26 Mar 2026 19:50:41 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-46598: Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.

Fri, 20 Mar 2026 00:00:00 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25611: Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Server

Tue, 10 Feb 2026 17:52:47 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24324: Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)

Tue, 10 Feb 2026 03:04:21 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0485: Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform

Tue, 10 Feb 2026 03:00:49 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse

Thu, 15 Jan 2026 22:15:18 GMT

devalue >=5.1.0, <5.6.2, fixed in 5.6.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse

Thu, 15 Jan 2026 18:10:15 GMT

devalue >=5.3.0, <5.6.2, fixed in 5.6.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Marshmallow has DoS in Schema.load(many)

Mon, 22 Dec 2025 20:20:07 GMT

marshmallow >=3.0.0rc1, <3.26.2 || >=4.0.0, <4.1.2, fixed in 3.26.2, 4.1.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-42876: Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)

Tue, 09 Dec 2025 02:14:40 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-42874: Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)

Tue, 09 Dec 2025 02:14:19 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.