# CWE-409.

Every Advisory and CVE whose sources give the weakness CWE-409, newest first.

## Records, newest first

- [Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer](https://agentprime.io/advisories/EEF-CVE-2026-119434.md)
  `EEF-CVE-2026-119434`, `CVE-2026-119434` · Hex `ezstd`: affected `>=1.0.5, <1.2.5`, fixed in `1.2.5` · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-409
- [Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression](https://agentprime.io/advisories/CVE-2026-122323.md)
  `CVE-2026-122323` · CVE record: kyverno kyverno · CVSS 8.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-409
- [Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression](https://agentprime.io/advisories/CVE-2026-122322.md)
  `CVE-2026-122322` · CVE record: kyverno kyverno · CVSS 8.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-409
- [Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses](https://agentprime.io/advisories/CVE-2026-65059.md)
  `CVE-2026-65059` · CVE record · No CVSS score · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-409
- [Gitea Helm chart upload decompression denial of service](https://agentprime.io/advisories/CVE-2026-117677.md)
  `CVE-2026-117677` · CVE record: Gitea Gitea · No CVSS score · Not analysed yet · Published 1 Nov 2026 · Tags: Denial of service, CWE-409
- [Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory](https://agentprime.io/advisories/GHSA-8fmv-6rg5-5924.md)
  `GHSA-8fmv-6rg5-5924`, `CVE-2026-118761`, `GO-2026-6899` · Go `github.com/kubeflow/pipelines`: affected `<0.0.0-20260831164314-ba9ae72cc860`, fixed in `0.0.0-20260831164314-ba9ae72cc860` · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-409
- [Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)](https://agentprime.io/advisories/GHSA-pjh6-c8mg-3x7m.md)
  `GHSA-pjh6-c8mg-3x7m`, `CVE-2026-116579` · PyPI `autobahn`: affected `>=26.7.1, <26.10.1`, fixed in `26.10.1` · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Denial of service, CWE-409
- [Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service](https://agentprime.io/advisories/CVE-2026-111073.md)
  `CVE-2026-111073` · CVE record: Apache Software Foundation Apache Kafka · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Denial of service, CWE-409
- [Tanium addressed a compression bomb vulnerability in Enforce.](https://agentprime.io/advisories/CVE-2026-116662.md)
  `CVE-2026-116662` · CVE record: Tanium Enforce · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-409
- [Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2](https://agentprime.io/advisories/GHSA-wfpv-qxp8-x5gm.md)
  `GHSA-wfpv-qxp8-x5gm`, `CVE-2026-65627`, `EEF-CVE-2026-65627` · Hex `jose`: affected `>=1.0.0, <1.11.13`, fixed in `1.11.13` · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-409
- [Unbounded memory consumption during PDF text extraction](https://agentprime.io/advisories/CVE-2026-93850.md)
  `CVE-2026-93850` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-409
- [Unbounded response body buffering and decompression in hackney](https://agentprime.io/advisories/EEF-CVE-2026-97200.md)
  `EEF-CVE-2026-97200`, `CVE-2026-97200` · Hex `hackney`: affected `>=2.0.0-beta.1, <4.9.0`, fixed in `4.9.0` · CVSS 8.2 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service, CWE-409
- [HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit](https://agentprime.io/advisories/GHSA-7gfj-7gvq-3xqj.md)
  `GHSA-7gfj-7gvq-3xqj`, `CVE-2026-109584`, `EEF-CVE-2026-109584` · Hex `bandit`: affected `>=0.3.3, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-409
- [vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions](https://agentprime.io/advisories/CVE-2026-116175.md)
  `CVE-2026-116175` · CVE record: vllm-project vllm · CVSS 7.1 High · Not analysed yet · Published 25 Oct 2026 · Tags: CWE-409
- [Echo: Decompress permits unbounded gzip expansion in v4](https://agentprime.io/advisories/GHSA-h7wr-284f-5qvc.md)
  `GHSA-h7wr-284f-5qvc`, `CVE-2026-118261`, `GO-2026-6842` · Go `github.com/labstack/echo/v4`: affected `>=4.0.0, <4.16.1`, fixed in `4.16.1` · CVSS 8.2 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service, CWE-409
- [OpenStack Ironic: OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results…](https://agentprime.io/advisories/CVE-2026-115638.md)
  `CVE-2026-115638` · CVE record: OpenStack Ironic · CVSS 4.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-409
- [Ghidra before 12.2 Denial of Service via Compressed Extension Archive](https://agentprime.io/advisories/CVE-2026-115503.md)
  `CVE-2026-115503` · CVE record: NationalSecurityAgency ghidra · CVSS 6.8 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-409
- [Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive](https://agentprime.io/advisories/CVE-2026-115396.md)
  `CVE-2026-115396` · CVE record: NationalSecurityAgency ghidra · CVSS 6.8 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-409
- [SmileCDR HAPI FHIR improper data decompression](https://agentprime.io/advisories/CVE-2026-113873.md)
  `CVE-2026-113873` · CVE record: SmileCDR HAPI FHIR · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-409
- [Django REST framework: JSONParser applies an attacker-named codec to the request stream](https://agentprime.io/advisories/GHSA-3547-9m27-7rxg.md)
  `GHSA-3547-9m27-7rxg`, `CVE-2026-114136` · PyPI `djangorestframework`: affected `>=3.6.4, <3.18.2`, fixed in `3.18.2` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service, CWE-409
- [Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS](https://agentprime.io/advisories/GHSA-g842-9rc4-69pw.md)
  `GHSA-g842-9rc4-69pw`, `BIT-pillow-2026-96637`, `CVE-2026-96637`, `PYSEC-2026-4338` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service, CWE-409
- [Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)](https://agentprime.io/advisories/GHSA-p8hx-v2p6-rp84.md)
  `GHSA-p8hx-v2p6-rp84`, `BIT-pillow-2026-96636`, `CVE-2026-96636`, `PYSEC-2026-4337` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service, CWE-409
- [Unbounded SAML message decompression in esaml allows memory exhaustion](https://agentprime.io/advisories/EEF-CVE-2026-93471.md)
  `EEF-CVE-2026-93471`, `CVE-2026-93471` · Hex `esaml`: affected `>=0.1.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-409
- [Pillow: MSP RLE decoder expands a tiny file into unbounded memory](https://agentprime.io/advisories/GHSA-gg2r-wvfm-q9rx.md)
  `GHSA-gg2r-wvfm-q9rx`, `BIT-pillow-2026-112892`, `CVE-2026-112892` · PyPI `pillow`: affected `>=4.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-409
- [Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml](https://agentprime.io/advisories/CVE-2026-92823.md)
  `CVE-2026-92823` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-409
- [Apache CouchDB: Pre-authentication gzip decompression bomb via POST /\_session](https://agentprime.io/advisories/CVE-2026-90797.md)
  `CVE-2026-90797` · CVE record: Apache Software Foundation Apache CouchDB · CVSS 7.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-409
- [Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression](https://agentprime.io/advisories/CVE-2026-111924.md)
  `CVE-2026-111924` · CVE record: fleetdm fleet · CVSS 8.7 High · Not analysed yet · Published 17 Oct 2026 · Tags: CWE-409
- [Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0…](https://agentprime.io/advisories/CVE-2026-102477.md)
  `CVE-2026-102477` · CVE record: Eclipse Foundation Eclipse Vert.x · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-409
- [Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled](https://agentprime.io/advisories/CVE-2026-102072.md)
  `CVE-2026-102072` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-409
- [Git Sync memory exhaustion via a malicious Git server](https://agentprime.io/advisories/CVE-2026-95502.md)
  `CVE-2026-95502` · CVE record: Grafana Nanogit and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service, CWE-409
- [Network messaging layer decompression resource exhaustion](https://agentprime.io/advisories/CVE-2026-97334.md)
  `CVE-2026-97334` · CVE record: Commvault Commvault Cloud · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-409
- [hex_core decompresses registry and Erlang term API responses without size limits](https://agentprime.io/advisories/GHSA-7c4r-cgf9-9jmq.md)
  `GHSA-7c4r-cgf9-9jmq`, `CVE-2026-105274`, `EEF-CVE-2026-105274` · Hex `hex_core`: affected `>=0.1.0, <0.20.0`, fixed in `0.20.0` · CVSS 2.1 Low · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-409
- [Grav before 2.1.7 Memory Exhaustion via Oversized Image Transforms](https://agentprime.io/advisories/CVE-2026-109324.md)
  `CVE-2026-109324` · CVE record: getgrav grav · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-409
- [Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image](https://agentprime.io/advisories/CVE-2026-109294.md)
  `CVE-2026-109294` · CVE record: open-webui open-webui · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service, CWE-409
- [Hex exhausts memory and disk on oversized or compressed responses from an untrusted mirror](https://agentprime.io/advisories/CVE-2026-96618.md)
  `CVE-2026-96618` · CVE record: hexpm hex · CVSS 2.1 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service, CWE-409
- [Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs](https://agentprime.io/advisories/CVE-2026-109398.md)
  `CVE-2026-109398` · CVE record: gumlet php-image-resize · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-409
- [SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor](https://agentprime.io/advisories/CVE-2026-109229.md)
  `CVE-2026-109229` · CVE record: sgl-project sglang · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-409
- [SGLang through 0.5.21 Audio Decompression Amplification via load_audio](https://agentprime.io/advisories/CVE-2026-109226.md)
  `CVE-2026-109226` · CVE record: sgl-project sglang · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-409
- [OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extraction](https://agentprime.io/advisories/CVE-2026-108750.md)
  `CVE-2026-108750` · CVE record: OpenDocMan OpenDocMan · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-409
- [Vikunja: Denial of service via decompression bomb in the data import](https://agentprime.io/advisories/GHSA-w7jp-mf2v-8342.md)
  `GHSA-w7jp-mf2v-8342`, `CVE-2026-91979`, `GO-2026-6756` · Go `code.vikunja.io/api`: affected `<2.6.0`, fixed in `2.6.0` · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service, CWE-409
- [Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)](https://agentprime.io/advisories/CVE-2026-78384.md)
  `CVE-2026-78384` · CVE record: Apache Software Foundation Apache CXF · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-409
- [Improper Handling of Highly Compressed Data in Malcolm](https://agentprime.io/advisories/CVE-2026-107335.md)
  `CVE-2026-107335` · CVE record: CISA Malcolm · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-409
- [AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled](https://agentprime.io/advisories/GHSA-x8v2-478q-2hvg.md)
  `GHSA-x8v2-478q-2hvg`, `CVE-2026-107227` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0, <3.0.14 || >=2.2.0, <=2.16.1`, fixed in `3.0.14` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service, CWE-409
- [ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data](https://agentprime.io/advisories/CVE-2026-107210.md)
  `CVE-2026-107210` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-409
- [OpenBSD OpenSSH: In sshd and ssh in OpenSSH before 10.6…](https://agentprime.io/advisories/CVE-2026-106585.md)
  `CVE-2026-106585` · CVE record: OpenBSD OpenSSH · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-409
- [Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)](https://agentprime.io/advisories/GHSA-3cr3-8m4c-fpxw.md)
  `GHSA-3cr3-8m4c-fpxw`, `CVE-2026-105747`, `PYSEC-2026-4194`, `PYSEC-2026-4209` · PyPI `docling` and 1 more: affected `>=2.45.0, <2.131.0`, fixed in `2.131.0` · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service, CWE-409
- [Duplicate Advisory: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)](https://agentprime.io/advisories/GHSA-f4ch-vxwc-3p2m.md)
  `GHSA-f4ch-vxwc-3p2m` · PyPI `docling`: affected `>=2.45.0, <2.131.0`, fixed in `2.131.0` · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-409
- [Praxis affected by HTTP/2 Bomb](https://agentprime.io/advisories/GHSA-cjcg-cxmh-9wcr.md)
  `GHSA-cjcg-cxmh-9wcr` · crates.io `praxis-proxy`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-409
- [Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize](https://agentprime.io/advisories/CVE-2026-66054.md)
  `CVE-2026-66054` · CVE record: Apache Software Foundation Apache Thrift · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-409
- [Apache Thrift: Go \`THeaderTransport\` does not bound the inflated size of a ZLIB frame](https://agentprime.io/advisories/CVE-2026-94637.md)
  `CVE-2026-94637` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-409
- [Apache Thrift: Python \`TZlibTransport\` stops enforcing its decompressed-size limit once the limit is exactly used up](https://agentprime.io/advisories/CVE-2026-94636.md)
  `CVE-2026-94636` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-409, CWE-628, CWE-1284
- [devalue: Repeated primitive strings cause quadratic expansion in uneval](https://agentprime.io/advisories/GHSA-mcm9-63f2-9j32.md)
  `GHSA-mcm9-63f2-9j32` · npm `devalue`: affected `<5.9.3`, fixed in `5.9.3` · CVSS 4.0, no score published · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service, CWE-409
- [tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM](https://agentprime.io/advisories/GHSA-chx6-46f5-w4vp.md)
  `GHSA-chx6-46f5-w4vp`, `CVE-2026-103262` · PyPI `tornado`: affected `<6.5.9`, fixed in `6.5.9` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service, CWE-409
- [Fireware OS Resource Exhaustion in Login Process Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-86104.md)
  `CVE-2026-86104` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-409
- [adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0](https://agentprime.io/advisories/GHSA-rcw4-f5rp-g42v.md)
  `GHSA-rcw4-f5rp-g42v`, `CVE-2026-92000` · npm `adm-zip`: affected `<0.6.1`, fixed in `0.6.1` · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-409
- [Nicotine+: Decompression of peer messages can exhaust available memory](https://agentprime.io/advisories/CVE-2026-68911.md)
  `CVE-2026-68911` · CVE record: nicotine-plus nicotine-plus · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-409
- [Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering](https://agentprime.io/advisories/CVE-2026-92573.md)
  `CVE-2026-92573` · CVE record: Apache Software Foundation Apache Qpid Broker-J · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-409
- [Docmost: Unbounded ZIP decompression (zip-bomb) in page import allows denial of service](https://agentprime.io/advisories/CVE-2026-65827.md)
  `CVE-2026-65827` · CVE record: docmost docmost · CVSS 6.5 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Denial of service, CWE-409
- [RabbitMQ: Web-MQTT decompression bomb](https://agentprime.io/advisories/CVE-2026-67232.md)
  `CVE-2026-67232` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-409
- [Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation](https://agentprime.io/advisories/GHSA-hxp9-w8x3-p566.md)
  `GHSA-hxp9-w8x3-p566`, `CVE-2026-77528`, `PYSEC-2026-4027`, `PYSEC-2026-4031` · PyPI `autobahn` and 1 more: affected `<26.7.1`, fixed in `26.7.1` · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-409

Older: <https://agentprime.io/advisories/tag/cwe-409.md?cursor=WyIyMDI2LTA5LTIyVDIwOjM3OjI4LjAwMDAwMFoiLCJHSFNBLWh4cDktdzh4My1wNTY2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-409>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-409/>. Everything for agents: <https://agentprime.io/llms.txt>.