agentprime: CWE-471

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

Fri, 30 Oct 2026 23:02:14 GMT

node-forge <1.4.1, fixed in 1.4.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-63402: i18next: Shared built-in corruption through inherited-key deepExtend recursion

Fri, 30 Oct 2026 22:39:07 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54610: LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling

Fri, 30 Oct 2026 20:39:19 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

msgpack5: Decoding negative int64 values mutates the input buffer

Thu, 08 Oct 2026 17:39:30 GMT

msgpack5 <6.1.0, fixed in 6.1.0. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Thu, 01 Oct 2026 15:35:25 GMT

vm2 >=3.9.6, <3.11.7, fixed in 3.11.7. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

Wed, 30 Sep 2026 23:53:17 GMT

pyjwt >=2.11.0, <=2.13.0, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Thu, 17 Sep 2026 15:32:16 GMT

vm2 >=3.9.6, <=3.11.6, no fixed version yet. CVSS 4.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-84664: Download of code without integrity check in Jenkins Project Jenkins GitLab Plugin

Wed, 02 Sep 2026 15:40:50 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59299: Composition lookup can potentially poison base function in Spring Cloud Function

Thu, 27 Aug 2026 17:57:56 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50481: Azure Active Directory Elevation of Privilege Vulnerability

Thu, 06 Aug 2026 22:37:38 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)

Thu, 18 Jun 2026 14:27:37 GMT

dompurify <3.4.11, fixed in 3.4.11. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Mon, 15 Jun 2026 15:16:18 GMT

@angular/core <=19.2.25 || >=20.0.0-next.0, <20.3.25 || >=21.0.0-next.0, <21.2.17 || >=22.0.0-next.0, <22.0.1, fixed in 20.3.25, 21.2.17, 22.0.1. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-8492: Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

Tue, 19 May 2026 22:29:14 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Nautobot: GitRepository.current_head field should not be writable through REST API

Wed, 13 May 2026 15:31:04 GMT

nautobot <2.4.33 || >=3.0.0a2, <3.1.2, fixed in 2.4.33, 3.1.2. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

justhtml has sanitization bypass in custom policies and programmatic DOM

Wed, 22 Apr 2026 21:25:46 GMT

justhtml <1.17.0, fixed in 1.17.0. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Multiple security fixes in justhtml

Tue, 14 Apr 2026 20:05:10 GMT

justhtml <1.16.0, fixed in 1.16.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-57708: An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto, and Object.assign components.

Wed, 25 Jun 2025 00:00:00 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-33136: IBM Aspera Faspex data modification

Thu, 22 May 2025 16:14:02 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-9876: Application is vulnerable to Privilege escalation

Wed, 30 Apr 2025 18:31:28 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-55551: An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10).

Wed, 19 Mar 2025 00:00:00 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-45672: IBM Security Verify Bridge data manipulation

Thu, 23 Jan 2025 17:31:58 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-51462: IBM QRadar WinCollect Agent data manipulation

Fri, 17 Jan 2025 02:16:00 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Neo4j Cypher component mishandles IMMUTABLE privileges

Tue, 07 May 2024 18:30:34 GMT

org.neo4j:neo4j-cypher >=5.0.0, <5.19.0, fixed in 5.19.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-46232: era-compiler-vyper First Immutable Variable Initialization vulnerability

Wed, 25 Oct 2023 21:01:51 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-43697: Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP request…

Mon, 09 Oct 2023 12:03:27 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-2904: CVE-2023-2904

Wed, 07 Jun 2023 21:59:24 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

vm2 vulnerable to Arbitrary Code Execution

Wed, 21 Dec 2022 06:30:29 GMT

vm2 <3.9.10, fixed in 3.9.10. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-3288: GitLab: A branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5…

Mon, 17 Oct 2022 00:00:00 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Google Play Services SDK leads to apps having incorrectly set mutability flag

Sat, 13 Aug 2022 00:00:43 GMT

com.google.android.gms:play-services-basement <18.0.2, fixed in 18.0.2. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-1561: Crafted backend URLs in Lura Project

Mon, 01 Aug 2022 12:47:45 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Moodle Allows Modification of Constants

Fri, 13 May 2022 01:13:10 GMT

moodle/moodle <1.9.14 || >=2.0, <2.0.5 || >=2.1, <2.1.2, fixed in 1.9.14, 2.0.5, 2.1.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-21824: Node: Due to the formatting logic of the "console.table()" function it was not safe to allow…

Thu, 24 Feb 2022 00:00:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-24046: A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application.

Fri, 14 Jan 2022 18:10:10 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-42701: AzeoTech DAQFactory

Fri, 05 Nov 2021 15:39:27 GMT

CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-37193: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).

Tue, 14 Sep 2021 10:47:52 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-37177: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).

Tue, 14 Sep 2021 10:47:45 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Prototype pollution in json8-merge-patch

Mon, 10 May 2021 19:17:15 GMT

json8-merge-patch <1.0.3, fixed in 1.0.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

TypeORM vulnerable to MAID and Prototype Pollution

Fri, 07 May 2021 16:46:42 GMT

typeorm <0.2.25, fixed in 0.2.25. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in immer

Wed, 20 Jan 2021 21:27:56 GMT

immer >=7.0.0, <8.0.1, fixed in 8.0.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Write to immutable memory region in TensorFlow

Thu, 10 Dec 2020 19:07:28 GMT

tensorflow <1.15.5 || >=2.0.0, <2.0.4 || >=2.1.0, <2.1.3 || >=2.2.0, <2.2.2 || >=2.3.0, <2.3.2, fixed in 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in systeminformation

Fri, 27 Nov 2020 16:07:15 GMT

systeminformation <4.30.5, fixed in 4.30.5. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in highlight.js

Tue, 24 Nov 2020 22:58:41 GMT

highlight.js <9.18.2 || >=10.0.0, <10.1.2, fixed in 9.18.2, 10.1.2. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in json-logic-js

Thu, 12 Nov 2020 19:36:14 GMT

json-logic-js <2.0.0, fixed in 2.0.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype pollution in object-path

Mon, 19 Oct 2020 20:55:55 GMT

object-path <0.11.5, fixed in 0.11.5. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution

Thu, 03 Sep 2020 15:51:28 GMT

utils-extend >=0.0.0, no fixed version yet. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

dot-prop Prototype Pollution vulnerability

Wed, 29 Jul 2020 20:56:59 GMT

dot-prop <4.2.1 || >=5.0.0, <5.1.1, fixed in 4.2.1, 5.1.1. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in handlebars

Wed, 05 Jun 2019 14:07:48 GMT

handlebars <3.0.7 || >=4.0.0, <4.0.14 || >=4.1.0, <4.1.2, fixed in 3.0.7, 4.0.14, 4.1.2. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in defaults-deep

Thu, 26 Jul 2018 15:18:43 GMT

defaults-deep <0.2.4, fixed in 0.2.4. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in merge-deep

Thu, 26 Jul 2018 15:17:15 GMT

merge-deep <3.0.1, fixed in 3.0.1. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Prototype Pollution in lodash

Thu, 26 Jul 2018 15:14:52 GMT

lodash <4.17.5, fixed in 4.17.5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.