<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-479</title><description>Every new CWE-479 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Craft CMS has Potential Authenticated Remote Code Execution via Malicious Attached Behavior</title><link>https://agentprime.io/advisories/GHSA-qrgm-p9w5-rrfw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qrgm-p9w5-rrfw/</guid><description>craftcms/cms &gt;=4.0.0, &lt;4.17.12 || &gt;=5.0.0, &lt;5.9.18, fixed in 4.17.12, 5.9.18. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 06 May 2026 17:54:06 GMT</pubDate><category>Packagist</category><category>craftcms/cms</category></item><item><title>CVE-2021-26948: htmldoc: Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute…</title><link>https://agentprime.io/advisories/CVE-2021-26948/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26948/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Mar 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>