agentprime: CWE-41

Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

Fri, 30 Oct 2026 23:00:53 GMT

nuxt >=4.6.0, <4.6.3, fixed in 4.6.3. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-112343: Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing

Mon, 26 Oct 2026 15:54:12 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

fast-uri vulnerable to improper path equivalence in relative reference normalization

Fri, 23 Oct 2026 21:39:34 GMT

fast-uri <2.4.8 || >=3.0.0, <3.1.9 || >=4.0.0, <4.2.3, fixed in 2.4.8, 3.1.9, 4.2.3. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

Fri, 23 Oct 2026 21:36:40 GMT

fast-uri <2.4.8 || >=3.0.0, <3.1.9 || >=4.0.0, <4.2.3, fixed in 2.4.8, 3.1.9, 4.2.3. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-108463: Windows SmartScreen Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 19:01:45 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102217: WebDAV Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:01:35 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-70184: Windows Backup Engine Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:01:09 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88136: Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Tue, 13 Oct 2026 19:00:21 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102231: Visual Studio Code Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 18:59:27 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93709: Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler

Tue, 22 Sep 2026 00:50:45 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85978: Unauthenticated Remote Code Execution in Akana API Platform

Wed, 09 Sep 2026 10:31:55 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73019: Windows URL Moniker Security Feature Bypass Vulnerability

Tue, 08 Sep 2026 17:17:55 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72835: filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization

Fri, 14 Aug 2026 11:35:40 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

Wed, 29 Jul 2026 15:40:05 GMT

io.quarkus:quarkus-vertx-http <3.20.6.2 || >=3.21.0.CR1, <3.27.4.1 || >=3.28.0.CR1, <3.33.2.1 || >=3.34.0.CR1, <3.36.3 || >=3.37.0.CR1, <3.37.0, fixed in 3.20.6.2, 3.27.4.1, 3.33.2.1, 3.36.3, 3.37.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

goshs has ACL Bypass & Path Traversal

Tue, 28 Jul 2026 22:26:28 GMT

github.com/patrickhener/goshs <=1.1.4, no fixed version yet. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape

Tue, 28 Jul 2026 20:18:30 GMT

github.com/fission/fission <1.25.0, fixed in 1.25.0. CVSS 3.6 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

Thu, 18 Jun 2026 14:30:43 GMT

@bitbonsai/mcpvault <0.11.4, fixed in 0.11.4. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)

Tue, 16 Jun 2026 19:11:52 GMT

deno <2.7.14, fixed in 2.7.14. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-5816: Improper Resolution of Path Equivalence in GitLab

Wed, 22 Apr 2026 16:04:26 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Windows-compatible env override keys could bypass system.run approval binding

Tue, 07 Apr 2026 18:15:48 GMT

openclaw <2026.4.2, fixed in 2026.4.2. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories

Wed, 01 Apr 2026 21:16:49 GMT

@anthropic-ai/sdk >=0.79.0, <0.81.0, fixed in 0.81.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-23674: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 10 Mar 2026 17:05:11 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Better Auth's rou3 Dependency has Double-Slash Path Normalization which can Bypass disabledPaths Config and Rate Limits

Tue, 16 Dec 2025 21:22:45 GMT

better-auth <1.4.5, fixed in 1.4.5. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-58290: Denial of service (DoS) vulnerability in the office service.

Sat, 11 Oct 2025 08:49:56 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-43298: A parsing issue in the handling of directory paths was addressed with improved path validation.

Mon, 15 Sep 2025 22:35:54 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54107: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 09 Sep 2025 17:01:22 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Flask-CORS improper regex path matching vulnerability

Thu, 20 Mar 2025 12:32:45 GMT

flask-cors <6.0.0, fixed in 6.0.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Gradio Path Traversal vulnerability

Thu, 20 Mar 2025 12:32:42 GMT

gradio <=5.0.1, no fixed version yet. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-8765: Improper Path Equivalence Resolution in lunary-ai/lunary

Thu, 20 Mar 2025 10:10:37 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-0115: PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI

Wed, 12 Mar 2025 18:30:13 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21247: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 11 Mar 2025 16:59:06 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-24470: Fortinet FortiPortal: An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0…

Tue, 11 Feb 2025 16:08:58 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:04:49 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21189: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:04:29 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21328: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:04:16 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21329: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:04:15 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21219: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:04:11 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21269: Windows HTML Platforms Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:03:40 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21268: MapUrlToZone Security Feature Bypass Vulnerability

Tue, 14 Jan 2025 18:03:39 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability

Tue, 10 Sep 2024 16:54:18 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

gix-path improperly resolves configuration path reported by Git

Fri, 06 Sep 2024 12:00:00 GMT

gix-path >=0.0.0-0, <0.10.11, fixed in 0.10.11. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-30036: Windows Deployment Services Information Disclosure Vulnerability

Tue, 14 May 2024 16:57:25 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-46169: IBM DS8900F file manipulation

Thu, 07 Mar 2024 20:42:21 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-36396: Windows Compressed Folder Remote Code Execution Vulnerability

Tue, 14 Nov 2023 17:57:25 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-0855: Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

Fri, 04 Mar 2022 18:25:08 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.