# CWE-524.

Every Advisory and CVE whose sources give the weakness CWE-524, newest first.

## Records, newest first

- [Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-115710.md)
  `CVE-2026-115710` · CVE record: Elastic Elasticsearch · CVSS 4.2 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-524
- [Potential exposure of private data via empty and missing Vary headers](https://agentprime.io/advisories/CVE-2026-113593.md)
  `CVE-2026-113593` · CVE record: djangoproject Django · CVSS 2.3 Low · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-524
- [CachingWebClient shares user-specific HTTP responses across users via the shared cache tier](https://agentprime.io/advisories/CVE-2026-118489.md)
  `CVE-2026-118489` · CVE record: Eclipse Foundation Eclipse Vert.x · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure, CWE-524
- [WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response](https://agentprime.io/advisories/CVE-2026-111464.md)
  `CVE-2026-111464` · CVE record: emrevona WP Fastest Cache – WordPress Cache Plugin · CVSS 5.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-524
- [PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache](https://agentprime.io/advisories/CVE-2026-109217.md)
  `CVE-2026-109217` · CVE record: wpovernight PDF Invoices & Packing Slips for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: CWE-524
- [undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects](https://agentprime.io/advisories/GHSA-4w7w-5xrc-9h26.md)
  `GHSA-4w7w-5xrc-9h26`, `CVE-2026-109829` · npm `undici`: affected `>=7.0.0, <7.30.1 || >=8.0.0, <8.12.2`, fixed in `7.30.1`, `8.12.2` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346, CWE-524
- [Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache](https://agentprime.io/advisories/CVE-2026-94386.md)
  `CVE-2026-94386` · CVE record: Apache Software Foundation Apache Camel · CVSS 4.8 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-524
- [next.js cache leak across root param values in nested 'use cache' functions](https://agentprime.io/advisories/GHSA-h694-7cp9-m8p3.md)
  `GHSA-h694-7cp9-m8p3`, `CVE-2026-103004` · npm `next`: affected `>=16.3.0, <16.3.8`, fixed in `16.3.8` · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-524
- [Use of Cache Containing Sensitive Information in GitLab](https://agentprime.io/advisories/CVE-2026-105711.md)
  `CVE-2026-105711` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-524
- [Apache Cocoon: Cross-user cache poisoning](https://agentprime.io/advisories/CVE-2026-108088.md)
  `CVE-2026-108088` · CVE record: Apache Software Foundation Apache Cocoon · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-524
- [Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache](https://agentprime.io/advisories/CVE-2026-85317.md)
  `CVE-2026-85317` · CVE record: Apache Software Foundation Apache Camel · CVSS 4.8 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-524
- [SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author\_\* Cookie Check](https://agentprime.io/advisories/CVE-2026-104006.md)
  `CVE-2026-104006` · CVE record: softaculous SpeedyCache – Cache, Optimization, Performance · CVSS 3.7 Low · Not analysed yet · Published 10 Oct 2026 · Tags: CWE-524
- [Contao: Improper access control in the table access voter](https://agentprime.io/advisories/GHSA-5974-gfqc-wrcm.md)
  `GHSA-5974-gfqc-wrcm`, `CVE-2026-107851`, `PKSA-b5qj-hq3z-3ry8` · Packagist `contao/core-bundle`: affected `>=5.7.0, <5.7.12`, fixed in `5.7.12` · CVSS 4.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Broken access control, CWE-524
- [Next.js: Pending \`use cache\` fill can leak Draft Mode content into regular responses and persisted pages](https://agentprime.io/advisories/GHSA-3w37-wq28-93x7.md)
  `GHSA-3w37-wq28-93x7`, `CVE-2026-94544` · npm `next`: affected `>=16.3.0, <16.3.8`, fixed in `16.3.8` · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-524
- [Next.js has cache poisoning of SSG and ISR pages in self-hosted applications](https://agentprime.io/advisories/GHSA-4jqv-mc3x-m676.md)
  `GHSA-4jqv-mc3x-m676`, `CVE-2026-94543` · npm `next`: affected `>=15.0.0, <15.5.27 || >=16.0.0, <16.3.8`, fixed in `15.5.27`, `16.3.8` · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-524
- [Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service](https://agentprime.io/advisories/GHSA-mcj8-r9mp-w47p.md)
  `GHSA-mcj8-r9mp-w47p`, `CVE-2026-94484` · npm `next`: affected `>=15.0.0, <15.5.27 || >=16.0.0, <16.3.8`, fixed in `15.5.27`, `16.3.8` · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-524
- [vLLM: Harmony tool continuations drop \`cache_salt\` — restoring a cross-tenant prefix-cache membership oracle](https://agentprime.io/advisories/GHSA-935w-9g4m-p28p.md)
  `GHSA-935w-9g4m-p28p`, `CVE-2026-105752`, `PYSEC-2026-4308` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure, CWE-524
- [undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches](https://agentprime.io/advisories/GHSA-2jfj-6hjv-fm6j.md)
  `GHSA-2jfj-6hjv-fm6j`, `CVE-2026-84933` · npm `undici`: affected `>=7.0.0, <7.29.1 || >=8.0.0, <8.10.2`, fixed in `7.29.1`, `8.10.2` · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure, CWE-524
- [Token Cache Reuse in mcp-toolbox-sdk-python](https://agentprime.io/advisories/CVE-2026-19202.md)
  `CVE-2026-19202` · CVE record: Google mcp-toolbox-sdk-python · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-524
- [Withdrawn Advisory: http-cache-semantics max-stale handling can disclose cross-user cached responses](https://agentprime.io/advisories/GHSA-ch52-4w7c-c8xp.md)
  `GHSA-ch52-4w7c-c8xp`, `CVE-2026-93748` · npm `http-cache-semantics`: affected `<=4.2.0`, no fixed version yet · CVSS 8.7 High · Withdrawn · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-524
- [mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches](https://agentprime.io/advisories/GHSA-82qh-vrvm-gqvc.md)
  `GHSA-82qh-vrvm-gqvc`, `CVE-2026-89186`, `EEF-CVE-2026-89186` · Hex `mpp`: affected `>=0.1.0, <0.16.2`, fixed in `0.16.2` · CVSS 6.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-524
- [Angular: Information Leak via \`HttpTransferCache\` Bypass When Using \`withRequestsMadeViaParent\`](https://agentprime.io/advisories/GHSA-p297-fm68-3q8c.md)
  `GHSA-p297-fm68-3q8c`, `CVE-2026-88059` · npm `@angular/common`: affected `<=19.2.25 || >=20.0.0, <20.3.28 || >=21.0.0, <21.2.20 || >=22.0.0, <22.1.1`, fixed in `20.3.28`, `21.2.20`, `22.1.1` · CVSS 4.0 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Information disclosure, CWE-524
- [ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion](https://agentprime.io/advisories/GHSA-crqf-7m54-4hgc.md)
  `GHSA-crqf-7m54-4hgc`, `CVE-2026-82755`, `EEF-CVE-2026-82755` · Hex `ash_authentication_oauth2_server`: affected `>=0.1.3, <0.3.1`, fixed in `0.3.1` · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-524
- [django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)](https://agentprime.io/advisories/GHSA-fwjf-m4qw-9f2x.md)
  `GHSA-fwjf-m4qw-9f2x`, `CVE-2026-54625`, `PYSEC-2026-3824` · PyPI `django-cms`: affected `<5.0.8`, fixed in `5.0.8` · CVSS 4.8 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-349, CWE-524
- [Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable](https://agentprime.io/advisories/CVE-2026-15743.md)
  `CVE-2026-15743` · CVE record · CVSS 5.7 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-524
- [GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)](https://agentprime.io/advisories/GHSA-p77j-g7h5-r2vw.md)
  `GHSA-p77j-g7h5-r2vw` · PyPI `geolens`: affected `<1.2.4`, fixed in `1.2.4` · No CVSS score · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection, Information disclosure, Broken access control, Denial of service
- [Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite](https://agentprime.io/advisories/GHSA-8c42-7qj2-3j46.md)
  `GHSA-8c42-7qj2-3j46`, `CVE-2026-59903` · Maven `io.netty:netty-codec-http`: affected `>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final`, fixed in `4.2.17.Final`, `4.1.137.Final` · CVSS 6.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-524
- [Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients](https://agentprime.io/advisories/GHSA-wm8w-6qjm-cv43.md)
  `GHSA-wm8w-6qjm-cv43`, `CVE-2026-71316` · npm `nuxt`: affected `>=4.4.0, <4.5.1`, fixed in `4.5.1` · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control, CWE-524
- [Potential information leakage from manager /network/graph API in NeuVector](https://agentprime.io/advisories/CVE-2026-25703.md)
  `CVE-2026-25703` · CVE record: SUSE NeuVector · CVSS 7.3 High · Not analysed yet · Published 5 Aug 2026 · Tags: Authentication bypass, CWE-202, CWE-524
- [undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives](https://agentprime.io/advisories/GHSA-jr45-8vmc-qm54.md)
  `GHSA-jr45-8vmc-qm54`, `CVE-2026-14643` · npm `undici`: affected `>=7.0.0, <7.29.0 || >=8.0.0, <8.9.0`, fixed in `7.29.0`, `8.9.0` · CVSS 5.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-436, CWE-524
- [Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)](https://agentprime.io/advisories/GHSA-3wp3-xxj9-5jqq.md)
  `GHSA-3wp3-xxj9-5jqq`, `CVE-2026-59213`, `PYSEC-2026-3589` · PyPI `open-webui`: affected `>=0.6.27, <0.10.0`, fixed in `0.10.0` · CVSS 3.5 Low · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-524
- [Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension](https://agentprime.io/advisories/CVE-2026-65755.md)
  `CVE-2026-65755` · CVE record: regularlabs.com Articles Anywhere extension for Joomla and 1 more · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-524
- [Next.js: Cache confusion of response bodies for requests with bodies](https://agentprime.io/advisories/GHSA-68g3-v927-f742.md)
  `GHSA-68g3-v927-f742`, `CVE-2026-64648` · npm `next`: affected `>=13.0.0, <15.5.21 || >=16.0.0, <16.2.11`, fixed in `15.5.21`, `16.2.11` · CVSS 6.0 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-524
- [Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions](https://agentprime.io/advisories/CVE-2026-64792.md)
  `CVE-2026-64792` · CVE record: regularlabs.com Articles Anywhere extension for Joomla and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-524
- [Directus: Authorization-dependent response served from unsegmented cache key](https://agentprime.io/advisories/GHSA-c6w9-5g5j-jh2p.md)
  `GHSA-c6w9-5g5j-jh2p`, `CVE-2026-61836` · npm `directus`: affected `<12.0.0`, fixed in `12.0.0` · CVSS 8.6 High · Not analysed yet · Published 20 Jul 2026 · Tags: Broken access control, CWE-524
- [API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate](https://agentprime.io/advisories/GHSA-pjhx-3c3w-9v23.md)
  `GHSA-pjhx-3c3w-9v23`, `CVE-2026-49858`, `PKSA-3ncz-km6v-5vjr`, `PKSA-9wr7-4vnk-wwmr`, `PKSA-scrq-f2mk-7bhq` · Packagist `api-platform/core` and 2 more: affected `>=2.6.0, <4.1.29 || >=4.2.0, <4.2.25 || >=4.3.0, <4.3.8`, fixed in `4.1.29`, `4.2.25`, `4.3.8` · CVSS 5.9 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Broken access control, CWE-524
- [PAN-OS: Information Disclosure Vulnerability in Management Web Interface](https://agentprime.io/advisories/CVE-2026-0281.md)
  `CVE-2026-0281` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 2.1 Low · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-524
- [Django: cache middleware may expose private responses when unrelated request cookies are present](https://agentprime.io/advisories/GHSA-3h9f-r86x-qvjx.md)
  `GHSA-3h9f-r86x-qvjx`, `BIT-django-2026-48588`, `CVE-2026-48588`, `PYSEC-2026-2090` · PyPI `django`: affected `<5.2.16 || >=6.0.0, <6.0.7`, fixed in `5.2.16`, `6.0.7` · CVSS 2.3 Low · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-524
- [Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header](https://agentprime.io/advisories/GHSA-62q6-4hv4-vjrw.md)
  `GHSA-62q6-4hv4-vjrw`, `BIT-ghost-2026-53943`, `CVE-2026-53943` · npm `ghost`: affected `>=4.0.0, <6.37.0`, fixed in `6.37.0` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-524
- [Information about ECS zero scoped answers might leak to clients that use a specific ECS](https://agentprime.io/advisories/CVE-2026-40012.md)
  `CVE-2026-40012` · CVE record: PowerDNS Recursor · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-524
- [Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure](https://agentprime.io/advisories/CVE-2026-13007.md)
  `CVE-2026-13007` · CVE record: tenable Tenable Identity Exposure · CVSS 8.5 High · Not analysed yet · Published 23 Jun 2026 · Tags: Authentication bypass, CWE-524
- [undici vulnerable to cross-user information disclosure via shared cache whitespace bypass](https://agentprime.io/advisories/GHSA-pr7r-676h-xcf6.md)
  `GHSA-pr7r-676h-xcf6`, `CVE-2026-9678` · npm `undici`: affected `>=7.0.0, <7.28.0 || >=8.0.0, <8.5.0`, fixed in `7.28.0`, `8.5.0` · CVSS 5.9 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-524
- [@angular/service-worker: Request Credential & Cache Policy Stripping](https://agentprime.io/advisories/GHSA-95qp-cmmw-mgqv.md)
  `GHSA-95qp-cmmw-mgqv`, `CVE-2026-50184` · npm `@angular/service-worker`: affected `<=18.2.14 || >=19.0.0-next.0, <19.2.23 || >=20.0.0-next.0, <20.3.22 || >=21.0.0-next.0, <21.2.15 || >=22.0.0-next.0, <22.0.0-rc.2`, fixed in `19.2.23`, `20.3.22`, `21.2.15`, `22.0.0-rc.2` · CVSS 5.7 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Information disclosure, CWE-524
- [@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache](https://agentprime.io/advisories/GHSA-q6f4-qqrg-jv6x.md)
  `GHSA-q6f4-qqrg-jv6x`, `CVE-2026-50170` · npm `@angular/common`: affected `<=18.2.14 || >=19.0.0-next.0, <19.2.23 || >=20.0.0-next.0, <20.3.22 || >=21.0.0-next.0, <21.2.15 || >=22.0.0-next.0, <22.0.0-rc.2`, fixed in `19.2.23`, `20.3.22`, `21.2.15`, `22.0.0-rc.2` · CVSS 8.2 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-524
- [Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities](https://agentprime.io/advisories/GHSA-gv2q-mqqv-365m.md)
  `GHSA-gv2q-mqqv-365m`, `CVE-2026-50169` · npm `@angular/service-worker`: affected `<=18.2.14 || >=19.0.0-next.0, <19.2.23 || >=20.0.0-next.0, <20.3.22 || >=21.0.0-next.0, <21.2.15 || >=22.0.0-next.0, <22.0.0-rc.2`, fixed in `19.2.23`, `20.3.22`, `21.2.15`, `22.0.0-rc.2` · CVSS 5.7 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Information disclosure, CWE-441, CWE-524
- [Improper Search Cache Isolation for Scoped Search API Keys in Typesense](https://agentprime.io/advisories/CVE-2026-47225.md)
  `CVE-2026-47225` · CVE record: typesense typesense · CVSS 6.0 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-524
- [Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux](https://agentprime.io/advisories/GHSA-mq64-j8f9-9gcj.md)
  `GHSA-mq64-j8f9-9gcj`, `CVE-2026-41841` · Maven `org.springframework:spring-webflux` and 1 more: affected `>=7.0.0, <7.0.8 || >=6.2.0, <6.2.19 || >=6.1.0, <=6.1.21 || <=5.3.39`, fixed in `7.0.8`, `6.2.19` · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-524
- [drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise](https://agentprime.io/advisories/CVE-2026-46309.md)
  `CVE-2026-46309` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-524
- [An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.](https://agentprime.io/advisories/GHSA-qpc8-7fxc-cm4p.md)
  `GHSA-qpc8-7fxc-cm4p`, `BIT-django-2026-35193`, `CVE-2026-35193`, `PYSEC-2026-197` · PyPI `django`: affected `>=5.2, <5.2.15 || >=6.0, <6.0.6`, fixed in `5.2.15`, `6.0.6` · CVSS 2.3 Low · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-524
- [Joomla! Core - \[20260517\] - Incorrect Cache Key Construction for InputFilter objects](https://agentprime.io/advisories/CVE-2026-48901.md)
  `CVE-2026-48901` · CVE record: Joomla! Project Joomla! CMS · CVSS 7.5 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-524
- [Discourse: Cached outdated summaries can leak removed content](https://agentprime.io/advisories/CVE-2026-32244.md)
  `CVE-2026-32244` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 19 May 2026 · Tags: Information disclosure, CWE-524, CWE-672
- [Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage](https://agentprime.io/advisories/GHSA-p77w-8qqv-26rm.md)
  `GHSA-p77w-8qqv-26rm`, `CVE-2026-44457` · npm `hono`: affected `<4.12.18`, fixed in `4.12.18` · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: CWE-524
- [Django Uses Cache Containing Sensitive Information](https://agentprime.io/advisories/GHSA-5hrc-gvxj-w55p.md)
  `GHSA-5hrc-gvxj-w55p`, `BIT-django-2026-6907`, `CVE-2026-6907`, `PYSEC-2026-55` · PyPI `django`: affected `>=5.2, <5.2.14 || >=6.0, <6.0.5`, fixed in `5.2.14`, `6.0.5` · CVSS 2.3 Low · Not analysed yet · Published 5 May 2026 · Tags: CWE-524
- [Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.](https://agentprime.io/advisories/GHSA-wg35-8jpf-2xv3.md)
  `GHSA-wg35-8jpf-2xv3`, `CVE-2026-22741` · Maven `org.springframework:spring-webflux` and 1 more: affected `>=7.0.0, <7.0.7 || >=6.2.0, <6.2.18 || >=6.1.0, <=6.1.26 || <=5.3.47`, fixed in `7.0.7`, `6.2.18` · CVSS 3.1 Low · Not analysed yet · Published 29 Apr 2026 · Tags: CWE-524
- [Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parameters](https://agentprime.io/advisories/GHSA-35hp-hqmv-8qg8.md)
  `GHSA-35hp-hqmv-8qg8`, `CVE-2026-30246`, `GO-2026-5069` · Go `github.com/gofiber/fiber/v3`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 6.5 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Information disclosure, CWE-436, CWE-524
- [Distribution: stale blob access resurrection via repo-scoped redis descriptor cache invalidation](https://agentprime.io/advisories/GHSA-f2g3-hh2r-cwgc.md)
  `GHSA-f2g3-hh2r-cwgc`, `BIT-distribution-2026-35172`, `CVE-2026-35172`, `GO-2026-4942` · Go `github.com/distribution/distribution` and 1 more: affected `<=2.8.3`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 6 Apr 2026 · Tags: Broken access control, CWE-524
- [IBM Planning Analytics Information Disclosure](https://agentprime.io/advisories/CVE-2025-14806.md)
  `CVE-2025-14806` · CVE record: IBM Planning Analytics Local · CVSS 5.7 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-524
- [Flask session does not add \`Vary: Cookie\` header when accessed in some ways](https://agentprime.io/advisories/GHSA-68rp-wp8r-4726.md)
  `GHSA-68rp-wp8r-4726`, `CVE-2026-27205`, `PYSEC-2026-2151` · PyPI `flask`: affected `<3.1.3`, fixed in `3.1.3` · CVSS 2.3 Low · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-524
- [Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via \`Rails.cache\`)](https://agentprime.io/advisories/CVE-2026-25540.md)
  `CVE-2026-25540` · CVE record: mastodon mastodon · CVSS 6.5 Medium · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-524
- [Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception](https://agentprime.io/advisories/GHSA-6wqw-2p9w-4vw4.md)
  `GHSA-6wqw-2p9w-4vw4`, `CVE-2026-24472` · npm `hono`: affected `<4.11.7`, fixed in `4.11.7` · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Authentication bypass, CWE-524

Older: <https://agentprime.io/advisories/tag/cwe-524.md?cursor=WyIyMDI2LTAxLTI3VDE5OjA0OjE3LjAwMDAwMFoiLCJHSFNBLTZ3cXctMnA5dy00dnc0Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-524>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-524/>. Everything for agents: <https://agentprime.io/llms.txt>.