<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-475</title><description>Every new CWE-475 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-73797: HPE NonStop TSQLFIL - Memory corruption vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-73797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73797/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 11:21:02 GMT</pubDate><category>CVE</category></item><item><title>Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext</title><link>https://agentprime.io/advisories/GHSA-c4c3-7fpv-j4q5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-c4c3-7fpv-j4q5/</guid><description>io.netty:netty-handler &gt;=4.2.0.Final, &lt;4.2.17.Final || &lt;4.1.137.Final, fixed in 4.2.17.Final, 4.1.137.Final. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 18:16:14 GMT</pubDate><category>Maven</category><category>io.netty:netty-handler</category><category>critical</category></item><item><title>CVE-2026-19311: Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin</title><link>https://agentprime.io/advisories/CVE-2026-19311/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19311/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 18:34:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42009: Gnutls: gnutls: denial of service via dtls packet reordering vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-42009/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42009/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 May 2026 12:44:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8391: Other issue in the JavaScript Engine component</title><link>https://agentprime.io/advisories/CVE-2026-8391/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8391/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 12:36:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34379: OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)</title><link>https://agentprime.io/advisories/CVE-2026-34379/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34379/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 15:21:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21690: iccDEV has Type Confusion in CIccTagXmlTagData::ToXml()</title><link>https://agentprime.io/advisories/CVE-2026-21690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21690/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Jan 2026 21:50:25 GMT</pubDate><category>CVE</category></item><item><title> rtvm-interpreter lacks sufficient checks in public API</title><link>https://agentprime.io/advisories/GHSA-pq5v-rwp8-p7gm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pq5v-rwp8-p7gm/</guid><description>rtvm-interpreter &lt;=4.0.0, no fixed version yet. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Dec 2025 00:27:10 GMT</pubDate><category>crates.io</category><category>rtvm-interpreter</category></item><item><title>CVE-2025-47866: Trend Micro, Inc. Trend Micro Apex Central: An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below…</title><link>https://agentprime.io/advisories/CVE-2025-47866/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47866/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 17:42:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47865: Trend Micro, Inc. Trend Micro Apex Central: A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version…</title><link>https://agentprime.io/advisories/CVE-2025-47865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47865/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 17:42:30 GMT</pubDate><category>CVE</category></item><item><title>Open WebUI Allows Viewing of Admin Details</title><link>https://agentprime.io/advisories/GHSA-gv26-qw3h-8qvp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gv26-qw3h-8qvp/</guid><description>open-webui &lt;=0.3.8, no fixed version yet. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 12:32:46 GMT</pubDate><category>PyPI</category><category>open-webui</category></item><item><title>Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb</title><link>https://agentprime.io/advisories/GHSA-7xmc-vhjp-qv5q/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7xmc-vhjp-qv5q/</guid><description>gradio &gt;=4.0.0, &lt;=5.0.0b2, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 12:32:39 GMT</pubDate><category>PyPI</category><category>gradio</category></item><item><title>Undefined Behavior in mlflow</title><link>https://agentprime.io/advisories/GHSA-8f8q-q2j7-7j2m/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8f8q-q2j7-7j2m/</guid><description>mlflow &lt;2.11.3, fixed in 2.11.3. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Jun 2024 21:30:36 GMT</pubDate><category>PyPI</category><category>mlflow</category></item><item><title>CVE-2024-20380: ClamAV HTML Parser Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-20380/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20380/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Apr 2024 19:19:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-52533: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.</title><link>https://agentprime.io/advisories/CVE-2023-52533/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-52533/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Apr 2024 02:21:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4874: Undefined Behavior for Input to API in Mutt</title><link>https://agentprime.io/advisories/CVE-2023-4874/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4874/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 09 Sep 2023 14:30:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4875: Undefined Behavior for Input to API in Mutt</title><link>https://agentprime.io/advisories/CVE-2023-4875/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4875/</guid><description>CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 09 Sep 2023 14:30:24 GMT</pubDate><category>CVE</category></item><item><title>distribution catalog API endpoint can lead to OOM via malicious user input</title><link>https://agentprime.io/advisories/GHSA-hqxw-f8mx-cpmw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hqxw-f8mx-cpmw/</guid><description>github.com/docker/distribution &lt;2.8.2-beta.1, fixed in 2.8.2-beta.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 11 May 2023 20:37:54 GMT</pubDate><category>Go</category><category>github.com/docker/distribution</category></item><item><title>Undefined behavior when users supply invalid resource handles</title><link>https://agentprime.io/advisories/GHSA-5wpj-c6f7-24x8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-5wpj-c6f7-24x8/</guid><description>tensorflow &lt;2.6.4 || &gt;=2.7.0, &lt;2.7.2 || &gt;=2.8.0, &lt;2.8.1, fixed in 2.6.4, 2.7.2, 2.8.1. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 24 May 2022 22:13:59 GMT</pubDate><category>PyPI</category><category>tensorflow</category><category>tensorflow-cpu</category><category>tensorflow-gpu</category></item><item><title>CVE-2020-7925: Denial of Service when processing malformed Role names</title><link>https://agentprime.io/advisories/CVE-2020-7925/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-7925/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 23 Nov 2020 14:50:12 GMT</pubDate><category>CVE</category></item></channel></rss>