<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-460</title><description>Every new CWE-460 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit</title><link>https://agentprime.io/advisories/GHSA-2238-pgfc-w82m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2238-pgfc-w82m/</guid><description>bandit &gt;=1.9.0, &lt;1.14.0, fixed in 1.14.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 13:32:06 GMT</pubDate><category>Hex</category><category>bandit</category></item><item><title>CVE-2026-112326: Improper Cleanup on Thrown Exception in GitLab</title><link>https://agentprime.io/advisories/CVE-2026-112326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112326/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 23:33:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96273: Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB</title><link>https://agentprime.io/advisories/CVE-2026-96273/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96273/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 00:29:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93710: Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks</title><link>https://agentprime.io/advisories/CVE-2026-93710/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93710/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 00:51:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86748: Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive</title><link>https://agentprime.io/advisories/CVE-2026-86748/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86748/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 13:32:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-61387: Resource leak in Eclipse Foundation Eclipse Milo</title><link>https://agentprime.io/advisories/CVE-2026-61387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-61387/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Aug 2026 11:52:38 GMT</pubDate><category>CVE</category></item><item><title>PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)</title><link>https://agentprime.io/advisories/GHSA-fhv5-28vv-h8m8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fhv5-28vv-h8m8/</guid><description>pyjwt &gt;=2.0.0, &lt;2.13.0, fixed in 2.13.0. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jun 2026 17:28:46 GMT</pubDate><category>PyPI</category><category>pyjwt</category></item><item><title>CVE-2026-40583: UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt</title><link>https://agentprime.io/advisories/CVE-2026-40583/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40583/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Apr 2026 16:57:42 GMT</pubDate><category>CVE</category></item><item><title>Syft improper temporary file cleanup</title><link>https://agentprime.io/advisories/GHSA-rjcw-vg7j-m9rc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rjcw-vg7j-m9rc/</guid><description>github.com/anchore/syft &lt;1.42.3, fixed in 1.42.3. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 20:46:29 GMT</pubDate><category>Go</category><category>github.com/anchore/syft</category></item><item><title>CVE-2026-20118: Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-20118/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20118/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Mar 2026 16:31:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-69652: GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information.</title><link>https://agentprime.io/advisories/CVE-2025-69652/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-69652/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59399: EVerest libocpp: libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary…</title><link>https://agentprime.io/advisories/CVE-2025-59399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59399/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Sep 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Apache Tomcat Denial of Service via invalid HTTP priority header</title><link>https://agentprime.io/advisories/GHSA-3p2h-wqq4-wf4h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3p2h-wqq4-wf4h/</guid><description>org.apache.tomcat.embed:tomcat-embed-core &gt;=9.0.76, &lt;9.0.104 || &gt;=10.1.10, &lt;10.1.40 || &gt;=11.0.0-M2, &lt;11.0.6 || &gt;=8.5.0, &lt;=8.5.100, fixed in 9.0.104, 10.1.40, 11.0.6. CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.61 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Apr 2025 21:30:43 GMT</pubDate><category>Maven</category><category>org.apache.tomcat.embed:tomcat-embed-core</category><category>org.apache.tomcat:tomcat-coyote</category><category>critical</category></item><item><title>tRPC 11 WebSocket DoS Vulnerability</title><link>https://agentprime.io/advisories/GHSA-pj3v-9cm8-gvj8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pj3v-9cm8-gvj8/</guid><description>@trpc/server &gt;=11.0.0, &lt;11.1.1, fixed in 11.1.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Apr 2025 16:03:57 GMT</pubDate><category>npm</category><category>@trpc/server</category></item><item><title>Pleezer resource exhaustion through uncollected hook script processes</title><link>https://agentprime.io/advisories/GHSA-472w-7w45-g3w5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-472w-7w45-g3w5/</guid><description>pleezer &lt;0.16.0, fixed in 0.16.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Apr 2025 17:49:15 GMT</pubDate><category>crates.io</category><category>pleezer</category></item><item><title>Envoy crashes when HTTP ext_proc processes local replies</title><link>https://agentprime.io/advisories/GHSA-cf3q-gqg7-3fm9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cf3q-gqg7-3fm9/</guid><description>github.com/envoyproxy/envoy &lt;1.30.10 || &gt;=1.31.0, &lt;1.31.6 || &gt;=1.32.0, &lt;1.32.4 || &gt;=1.33.0, &lt;1.33.1, fixed in 1.30.10, 1.31.6, 1.32.4, 1.33.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Mar 2025 15:23:50 GMT</pubDate><category>Go</category><category>github.com/envoyproxy/envoy</category></item><item><title>Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary</title><link>https://agentprime.io/advisories/GHSA-xx83-cxmq-x89m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xx83-cxmq-x89m/</guid><description>github.com/hashicorp/boundary &lt;0.18.2, fixed in 0.18.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Dec 2024 16:35:54 GMT</pubDate><category>Go</category><category>github.com/hashicorp/boundary</category></item><item><title>CVE-2024-20354: A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition…</title><link>https://agentprime.io/advisories/CVE-2024-20354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20354/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Mar 2024 16:47:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0316: Improper cleanup vulnerability in FireEye Endpoint Security</title><link>https://agentprime.io/advisories/CVE-2024-0316/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0316/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jan 2024 16:04:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-46393: gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users&apos; passwords via a crafted packet.</title><link>https://agentprime.io/advisories/CVE-2023-46393/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46393/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Oct 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4744: Kernel: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in…</title><link>https://agentprime.io/advisories/CVE-2022-4744/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4744/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3707: A double-free memory flaw was found in the Linux kernel.</title><link>https://agentprime.io/advisories/CVE-2022-3707/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3707/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.</title><link>https://agentprime.io/advisories/GHSA-qq29-5vjh-vxwr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qq29-5vjh-vxwr/</guid><description>rdiffweb &lt;2.4.8, fixed in 2.4.8. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Sep 2022 11:15:00 GMT</pubDate><category>PyPI</category><category>rdiffweb</category></item><item><title>CVE-2022-22150: Foxit: A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF…</title><link>https://agentprime.io/advisories/CVE-2022-22150/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22150/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Feb 2022 22:29:08 GMT</pubDate><category>CVE</category></item><item><title>ordered_float:NotNan may contain NaN after panic in assignment operators</title><link>https://agentprime.io/advisories/GHSA-566x-hhrf-qf8m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-566x-hhrf-qf8m/</guid><description>ordered-float &gt;=0.2.2, &lt;1.1.1 || &gt;=2.0.0, &lt;2.0.1, fixed in 1.1.1, 2.0.1. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Aug 2021 20:50:30 GMT</pubDate><category>crates.io</category><category>ordered-float</category></item><item><title>CVE-2021-34716: Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-34716/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34716/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Aug 2021 19:40:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-14304: kernel: A memory disclosure flaw was found in the Linux kernel&apos;s ethernet drivers…</title><link>https://agentprime.io/advisories/CVE-2020-14304/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-14304/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2020 19:40:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-14891: cri-o: A flaw was found in cri-o, as a result of all pod-related processes being placed in the…</title><link>https://agentprime.io/advisories/CVE-2019-14891/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-14891/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Nov 2019 10:31:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-9657: Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible.</title><link>https://agentprime.io/advisories/CVE-2017-9657/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-9657/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Apr 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2016-9592: openshift: openshift before versions 3.3.1.11, 3.2.1.23…</title><link>https://agentprime.io/advisories/CVE-2016-9592/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2016-9592/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Apr 2018 14:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-15127: Linux kernel before 4.13: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux…</title><link>https://agentprime.io/advisories/CVE-2017-15127/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-15127/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 14 Jan 2018 06:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>