agentprime: CWE-459

CVE-2026-121750: nvm install --offline installs a cached tarball that previously failed checksum verification

Wed, 04 Nov 2026 21:28:43 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121204: Incomplete cleanup in Google Chrome

Tue, 03 Nov 2026 20:42:58 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121055: Incomplete cleanup in Google Chrome

Tue, 03 Nov 2026 20:42:56 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121096: Incomplete cleanup in Google Chrome

Tue, 03 Nov 2026 20:42:48 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85033: Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next peer

Tue, 03 Nov 2026 13:36:06 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116132: HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk

Wed, 28 Oct 2026 17:15:00 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

Fri, 23 Oct 2026 22:14:31 GMT

undici >=6.23.0, <6.29.1 || >=7.18.0, <7.30.1 || >=8.0.0, <8.12.2, fixed in 6.29.1, 7.30.1, 8.12.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

Fri, 23 Oct 2026 18:47:25 GMT

obsidian-tc >=1.0.1, <1.31.4, fixed in 1.31.4. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-113168: Incomplete cleanup in Google Chrome

Tue, 20 Oct 2026 21:02:38 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113050: Incomplete cleanup in Google Chrome

Tue, 20 Oct 2026 21:02:34 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113073: Incomplete cleanup in Google Chrome

Tue, 20 Oct 2026 21:02:20 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113010: Incomplete cleanup in Google Chrome

Tue, 20 Oct 2026 21:02:20 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113012: Incomplete cleanup in Google Chrome

Tue, 20 Oct 2026 21:01:54 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

Tue, 20 Oct 2026 18:10:32 GMT

apostrophe <4.33.0, fixed in 4.33.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-93446: Apache Tomcat: Possible TLS 1.3 connection failures

Tue, 20 Oct 2026 13:44:35 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88041: Apache Tomcat: HTTP/2 trailer header cross-contamination

Tue, 20 Oct 2026 13:43:28 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110008: @fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback

Mon, 19 Oct 2026 13:24:27 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112180: MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records

Mon, 19 Oct 2026 09:00:13 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-17525: My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion

Thu, 15 Oct 2026 10:09:17 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102030: Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used

Wed, 14 Oct 2026 16:49:36 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103937: Misskey: Denial of service resulting from insufficient cleanup processing during file uploads

Tue, 13 Oct 2026 18:42:17 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49484: Code for IBM i: Temporary files are visible to all users

Mon, 12 Oct 2026 21:37:50 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109276: ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder

Mon, 12 Oct 2026 16:04:41 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108982: Incomplete cleanup in IDRIX VeraCrypt

Mon, 12 Oct 2026 02:44:04 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19740: Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure

Sun, 11 Oct 2026 17:15:08 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19739: Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Update

Sun, 11 Oct 2026 17:15:06 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107914: Incomplete cleanup in Backdrop

Fri, 09 Oct 2026 05:18:26 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107332: Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code

Thu, 08 Oct 2026 17:33:30 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106294: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:42 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106394: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:35 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106375: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:29 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106262: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:29 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106203: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:10 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106243: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:08 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106366: Incomplete cleanup in Google Chrome

Tue, 06 Oct 2026 18:41:07 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

compression vulnerable to Denial of Service via memory leak on premature response close

Mon, 05 Oct 2026 23:28:01 GMT

compression <1.8.2, fixed in 1.8.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-104427: Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry

Fri, 02 Oct 2026 11:38:07 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104421: Zebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes Lockout

Fri, 02 Oct 2026 11:38:02 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-95326: Incomplete cleanup in Google Chrome

Tue, 29 Sep 2026 17:31:58 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-95303: Incomplete cleanup in Google Chrome

Tue, 29 Sep 2026 17:31:48 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15390: Out-of-bounds write in Das U-Boot

Tue, 29 Sep 2026 10:04:31 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

Mon, 28 Sep 2026 21:34:58 GMT

multer >=2.2.0, <2.4.0, fixed in 2.4.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-101100: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup

Mon, 28 Sep 2026 17:30:15 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

podman quadlet install --replace does not fully replace the old file

Thu, 24 Sep 2026 16:28:26 GMT

github.com/containers/podman/v5 >=5.7.0, <5.8.6, fixed in 5.8.6. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-78437: Apache Tomcat: HTTP/2 DoS via malformed request

Wed, 23 Sep 2026 11:26:29 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91730: Incomplete cleanup in Google Chrome

Tue, 15 Sep 2026 20:41:36 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75945: A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.

Mon, 14 Sep 2026 22:23:02 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75944: A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants…

Mon, 14 Sep 2026 22:19:19 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75943: A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this windo…

Mon, 14 Sep 2026 22:11:53 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87549: Incomplete cleanup in Google Chrome

Wed, 09 Sep 2026 00:09:51 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.