# CWE-506.

Every Advisory and CVE whose sources give the weakness CWE-506, newest first.

## Records, newest first

- [Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code](https://agentprime.io/advisories/CVE-2026-111862.md)
  `CVE-2026-111862` · CVE record: RankMath Rank Math SEO PRO · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-506
- [IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL](https://agentprime.io/advisories/CVE-2026-97230.md)
  `CVE-2026-97230` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-506
- [Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL](https://agentprime.io/advisories/CVE-2026-95831.md)
  `CVE-2026-95831` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-506
- [Zbtlink MQWrt yunmgrd Cloud C2 Implant](https://agentprime.io/advisories/CVE-2026-74232.md)
  `CVE-2026-74232` · CVE record: Zbtlink L3_V2_8 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-300, CWE-506
- [Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)](https://agentprime.io/advisories/GHSA-93qj-5q5v-3c2h.md)
  `GHSA-93qj-5q5v-3c2h` · PyPI `pantheon-agents`: affected `>=0.6.1, <0.6.4`, fixed in `0.6.4` · No CVSS score · Not analysed yet · Published 26 Aug 2026 · Tags: Hard-coded credentials, CWE-506
- [droundy arrayref: The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling…](https://agentprime.io/advisories/CVE-2026-77651.md)
  `CVE-2026-77651` · CVE record: droundy arrayref · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-506
- [droundy append-only-vec: The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when…](https://agentprime.io/advisories/CVE-2026-77650.md)
  `CVE-2026-77650` · CVE record: droundy append-only-vec · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-506
- [droundy internment: The internment crate 0.8.7 for Rust can trigger execution of malicious code when…](https://agentprime.io/advisories/CVE-2026-77649.md)
  `CVE-2026-77649` · CVE record: droundy internment · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-506
- [Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build](https://agentprime.io/advisories/CVE-2026-73532.md)
  `CVE-2026-73532` · CVE record: WPManageNinja Fluent Forms Pro · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-506
- [Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build](https://agentprime.io/advisories/CVE-2026-73533.md)
  `CVE-2026-73533` · CVE record: WPManageNinja Ninja Tables Pro · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-506
- [react18-use was vulnerable to malicious code execution via compromised commits](https://agentprime.io/advisories/CVE-2026-48161.md)
  `CVE-2026-48161` · CVE record: dai-shi react18-use · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-506
- [react-tracked was vulnerable to malicious code execution via compromised commits](https://agentprime.io/advisories/CVE-2026-48160.md)
  `CVE-2026-48160` · CVE record: dai-shi react-tracked · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-506
- [use-reducer-async was vulnerable to malicious code execution via compromised commits](https://agentprime.io/advisories/CVE-2026-48159.md)
  `CVE-2026-48159` · CVE record: dai-shi use-reducer-async · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-506
- [use-context-selector was vulnerable to malicious code execution via compromised commits](https://agentprime.io/advisories/CVE-2026-48158.md)
  `CVE-2026-48158` · CVE record: dai-shi use-context-selector · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-506
- [ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant](https://agentprime.io/advisories/CVE-2026-66747.md)
  `CVE-2026-66747` · CVE record: Zbtlink CPE2801 Firmware and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-506
- [VaahCMS 2.0.0 - 2.3.4 Malicious JavaScript Supply Chain via security-otp.blade.php](https://agentprime.io/advisories/CVE-2026-67595.md)
  `CVE-2026-67595` · CVE record: webreinvent vaahcms · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-506
- [Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … 10.8.7 - Unauthenticated Authentication Bypass via Hardcoded Backdoor in '\_wplogin' Parameter](https://agentprime.io/advisories/CVE-2026-18072.md)
  `CVE-2026-18072` · CVE record: nico23 Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-506
- [\`exploration\` was removed from crates.io for malicious code](https://agentprime.io/advisories/GHSA-99j7-fhr2-xfj4.md)
  `GHSA-99j7-fhr2-xfj4`, `RUSTSEC-2026-0155` · crates.io `exploration`: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-506
- [semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin](https://agentprime.io/advisories/GHSA-98x5-vq43-vc5p.md)
  `GHSA-98x5-vq43-vc5p` · PyPI `semantic-router`: affected `>=0.1.8, <0.1.15`, fixed in `0.1.15` · No CVSS score · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-506
- [Supply chain compromise via malicious @cap-js/openapi](https://agentprime.io/advisories/GHSA-jpvj-wpmj-h7rv.md)
  `GHSA-jpvj-wpmj-h7rv` · npm `@cap-js/openapi`: affected `>=1.4.1, <1.4.2`, fixed in `1.4.2` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-506
- [Compromised Nx Console version 18.95.0](https://agentprime.io/advisories/CVE-2026-48027.md)
  `CVE-2026-48027` · CVE record: nrwl nx-console · CVSS 9.3 Critical · Critical (KEV, CVSS 9+) · In CISA KEV, ransomware · Not analysed yet · Published 27 May 2026 · Tags: CWE-506
- [Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)](https://agentprime.io/advisories/GHSA-pvw4-cvr4-97p8.md)
  `GHSA-pvw4-cvr4-97p8`, `CVE-2026-46421` · npm `@cap-js/sqlite` and 2 more: affected `>=2.2.2, <2.3.0`, fixed in `2.3.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 May 2026 · Tags: CWE-506
- [Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm](https://agentprime.io/advisories/GHSA-6xwp-cp5h-q856.md)
  `GHSA-6xwp-cp5h-q856`, `CVE-2026-46412` · npm `@beproduct/nestjs-auth`: affected `>=0.1.2, <=0.1.19`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: CWE-506
- [Malicious code in guardrails-ai 0.10.1 (supply chain compromise)](https://agentprime.io/advisories/GHSA-xmpw-2vmm-p4p6.md)
  `GHSA-xmpw-2vmm-p4p6`, `CVE-2026-45758`, `PYSEC-2026-206` · PyPI `guardrails-ai`: affected `=0.10.1`, no fixed version yet · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: CWE-506
- [Malware in @opensearch-project/opensearch](https://agentprime.io/advisories/GHSA-27f5-xjrr-q9ff.md)
  `GHSA-27f5-xjrr-q9ff` · npm `@opensearch-project/opensearch`: affected `=3.5.3 || =3.6.2 || =3.7.0 || =3.8.0`, no fixed version yet · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: CWE-506
- [Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp](https://agentprime.io/advisories/GHSA-jgg6-4rpr-wfh7.md)
  `GHSA-jgg6-4rpr-wfh7` · npm `@mistralai/mistralai` and 2 more: affected `=2.2.2 || =2.2.3 || =2.2.4`, no fixed version yet · CVSS 0.0 None · Not analysed yet · Published 18 May 2026 · Tags: CWE-506
- [Malicious dropper in mistralai 2.4.6 PyPI package](https://agentprime.io/advisories/GHSA-wx9m-wx4f-4cmg.md)
  `GHSA-wx9m-wx4f-4cmg` · PyPI `mistralai`: affected `=2.4.6`, no fixed version yet · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 May 2026 · Tags: CWE-506
- [AVB Disc Soft DAEMON Tools Lite: A supply chain attack compromised the official installation packages of DAEMON Tools Lite…](https://agentprime.io/advisories/CVE-2026-8398.md)
  `CVE-2026-8398` · CVE record: AVB Disc Soft DAEMON Tools Lite · CVSS 9.3 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 15 May 2026 · Tags: CWE-506
- [Malware in @tanstack/\* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys](https://agentprime.io/advisories/GHSA-g7cv-rxg3-hmpx.md)
  `GHSA-g7cv-rxg3-hmpx`, `CVE-2026-45321` · npm `@tanstack/arktype-adapter` and 41 more: affected `>=1.166.12, <1.166.16 || >=1.166.15, <1.166.16`, fixed in `1.166.16` · CVSS 9.6 Critical · Critical (KEV, CVSS 9+) · In CISA KEV, ransomware · Not analysed yet · Published 12 May 2026 · Tags: CWE-506
- [Compromised version of intercom-client published to npm](https://agentprime.io/advisories/GHSA-54pg-9963-v8vg.md)
  `GHSA-54pg-9963-v8vg` · npm `intercom-client`: affected `=7.0.4`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: CWE-506
- [Compromised tag of intercom-php published via GitHub](https://agentprime.io/advisories/GHSA-gr3r-crp5-qrrm.md)
  `GHSA-gr3r-crp5-qrrm`, `PKSA-gwt3-5dgf-97fx` · Packagist `intercom/intercom-php`: affected `=5.0.2`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: CWE-506
- [Compromise of PyTorch Lightning PyPi Package Versions](https://agentprime.io/advisories/GHSA-w37p-236h-pfx3.md)
  `GHSA-w37p-236h-pfx3`, `CVE-2026-44484`, `PYSEC-2026-3973`, `PYSEC-2026-508` · PyPI `pytorch-lightning`: affected `=2.6.2 || =2.6.3`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: CWE-506, CWE-829
- [\`mysten-metrics\` was removed from crates.io for malicious code](https://agentprime.io/advisories/GHSA-g38r-8gmr-ghrf.md)
  `GHSA-g38r-8gmr-ghrf`, `RUSTSEC-2026-0107` · crates.io `mysten-metrics`: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 4 May 2026 · Tags: CWE-506
- [\`sui-execution-cut\` was removed from crates.io for malicious code](https://agentprime.io/advisories/GHSA-qprh-m6p3-hwxc.md)
  `GHSA-qprh-m6p3-hwxc`, `RUSTSEC-2026-0108` · crates.io `sui-execution-cut`: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 4 May 2026 · Tags: CWE-506
- [Essentialplugin Plugins (Various Versions) - Injected Backdoor](https://agentprime.io/advisories/CVE-2026-6443.md)
  `CVE-2026-6443` · CVE record: essentialplugin Accordion and Accordion Slider and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-506
- [Smart Slider 3 Pro 3.5.1.35 Supply Chain Attack Remote Access Toolkit](https://agentprime.io/advisories/CVE-2026-34424.md)
  `CVE-2026-34424` · CVE record: Nextendweb Smart Slider 3 Pro for WordPress and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-506
- [Axios npm Supply Chain Incident Impacting @usebruno/cli](https://agentprime.io/advisories/GHSA-658g-p7jg-wx5g.md)
  `GHSA-658g-p7jg-wx5g`, `CVE-2026-34841` · npm `@usebruno/cli`: affected `<3.2.1`, fixed in `3.2.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-494, CWE-506, CWE-1395
- [Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2](https://agentprime.io/advisories/GHSA-955r-262c-33jc.md)
  `GHSA-955r-262c-33jc` · PyPI `telnyx`: affected `>=4.87.1, <=4.87.2`, no fixed version yet · No CVSS score · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-506
- [Two LiteLLM versions published containing credential harvesting malware](https://agentprime.io/advisories/GHSA-5mg7-485q-xm76.md)
  `GHSA-5mg7-485q-xm76` · PyPI `litellm`: affected `>=1.82.7, <=1.82.8`, no fixed version yet · No CVSS score · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-506
- [Trivy ecosystem supply chain was briefly compromised](https://agentprime.io/advisories/GHSA-69fq-xp46-6x23.md)
  `GHSA-69fq-xp46-6x23`, `CVE-2026-33634`, `GO-2026-4919` · Go `github.com/aquasecurity/trivy`: affected `=0.69.4`, no fixed version yet · CVSS 9.4 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.60 · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-506
- [xygeni-action v5 tag poisoned with C2 backdoor](https://agentprime.io/advisories/CVE-2026-31976.md)
  `CVE-2026-31976` · CVE record: xygeni xygeni-action · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-506
- [Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension Release](https://agentprime.io/advisories/CVE-2026-28353.md)
  `CVE-2026-28353` · CVE record: aquasecurity trivy-vscode-extension · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-506
- [OVRI Payment 1.7.0 - Malicious .htaccess directive](https://agentprime.io/advisories/CVE-2024-10938.md)
  `CVE-2024-10938` · CVE record: moneytigo OVRI Payment · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-506
- [A single post-release of dydx-v4-client contained obfuscated multi-stage loader](https://agentprime.io/advisories/GHSA-4f84-67cv-qrv3.md)
  `GHSA-4f84-67cv-qrv3` · PyPI `dydx-v4-client`: affected `>=1.1.5.post1`, no fixed version yet · CVSS 4.0, no score published · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-506
- [ASUS live update: "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were…](https://agentprime.io/advisories/CVE-2025-59374.md)
  `CVE-2025-59374` · CVE record: ASUS live update · CVSS 9.3 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 17 Dec 2025 · Tags: CWE-506
- [VestaCP Debian Installer Malicious Backdoor Supply Chain Compromise](https://agentprime.io/advisories/CVE-2018-25117.md)
  `CVE-2018-25117` · CVE record: Vesta Control Panel (CP) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-506
- [NetSarang v5.0 Malicious Backdoor Supply Chain Compromise](https://agentprime.io/advisories/CVE-2017-20203.md)
  `CVE-2017-20203` · CVE record: NetSarang Computer, Inc. Xmanager Enterprise and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-506
- [Web Developer for Chrome v0.4.9 Malicious Backdoor Supply Chain Compromise](https://agentprime.io/advisories/CVE-2017-20202.md)
  `CVE-2017-20202` · CVE record: Web Developer for Chrome Web Developer for Chrome · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2025 · Tags: CWE-506
- [CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise](https://agentprime.io/advisories/CVE-2017-20201.md)
  `CVE-2017-20201` · CVE record: Piriform CCleaner and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2025 · Tags: CWE-506
- [Duplicate Advisory: Malicious versions of Nx were published](https://agentprime.io/advisories/GHSA-8mjq-32x3-22qf.md)
  `GHSA-8mjq-32x3-22qf` · npm `nx`: affected `=21.5.0`, no fixed version yet · CVSS 9.6 Critical · Withdrawn · Not analysed yet · Published 25 Sept 2025 · Tags: CWE-506
- [TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application.](https://agentprime.io/advisories/CVE-2025-55556.md)
  `CVE-2025-55556` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: CWE-506
- [Nx: nx/devkit: malicious versions of nx and plugins published to npm](https://agentprime.io/advisories/CVE-2025-10894.md)
  `CVE-2025-10894` · CVE record: Red Hat Multicluster Global Hub and 3 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-506
- [color-name\@2.0.1 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59145.md)
  `CVE-2025-59145` · CVE record: colorjs color-name · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [is-arrayish\@0.3.3 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59331.md)
  `CVE-2025-59331` · CVE record: Qix- node-is-arrayish · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [error-ex\@1.3.3 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59330.md)
  `CVE-2025-59330` · CVE record: Qix- node-error-ex · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [color-convert\@3.1.1 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59162.md)
  `CVE-2025-59162` · CVE record: Qix- color-convert · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [color-string\@2.1.1 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59142.md)
  `CVE-2025-59142` · CVE record: Qix- color-string · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [debug\@4.4.2 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59144.md)
  `CVE-2025-59144` · CVE record: debug-js debug · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [color\@5.0.1 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59143.md)
  `CVE-2025-59143` · CVE record: Qix- color · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506
- [simple-swizzle\@0.2.3 contains malware after npm account takeover](https://agentprime.io/advisories/CVE-2025-59141.md)
  `CVE-2025-59141` · CVE record: Qix- node-simple-swizzle · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-506

Older: <https://agentprime.io/advisories/tag/cwe-506.md?cursor=WyIyMDI1LTA5LTE1VDE5OjA5OjU4LjY2MTAwMFoiLCJDVkUtMjAyNS01OTE0MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-506>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-506/>. Everything for agents: <https://agentprime.io/llms.txt>.