<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-599</title><description>Every new CWE-599 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-62657: Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models</title><link>https://agentprime.io/advisories/CVE-2026-62657/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62657/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 17:46:13 GMT</pubDate><category>CVE</category></item><item><title>SageMaker Python SDK has Insecure TLS Configuration</title><link>https://agentprime.io/advisories/GHSA-62rc-f4v9-h543/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-62rc-f4v9-h543/</guid><description>sagemaker &lt;2.256.0 || &gt;=3.0, &lt;3.1.1, fixed in 2.256.0, 3.1.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Feb 2026 23:24:50 GMT</pubDate><category>PyPI</category><category>sagemaker</category></item><item><title>OpenList has Insecure TLS Default Configuration</title><link>https://agentprime.io/advisories/GHSA-wf93-3ghh-h389/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wf93-3ghh-h389/</guid><description>github.com/OpenListTeam/OpenList/v4 &lt;4.1.10, fixed in 4.1.10. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Feb 2026 20:12:52 GMT</pubDate><category>Go</category><category>github.com/OpenListTeam/OpenList/v4</category></item><item><title>CVE-2025-63432: Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation.</title><link>https://agentprime.io/advisories/CVE-2025-63432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-63432/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Nov 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-56232: GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation.</title><link>https://agentprime.io/advisories/CVE-2025-56232/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-56232/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Nov 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-56230: Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.</title><link>https://agentprime.io/advisories/CVE-2025-56230/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-56230/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Nov 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12553: Server Certificate Verification Disabled</title><link>https://agentprime.io/advisories/CVE-2025-12553/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12553/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Oct 2025 15:48:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-56146: Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.</title><link>https://agentprime.io/advisories/CVE-2025-56146/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-56146/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Sep 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd</title><link>https://agentprime.io/advisories/GHSA-7943-82jg-wmw5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7943-82jg-wmw5/</guid><description>github.com/argoproj/argo-cd &gt;=0.4.0, no fixed version yet. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Aug 2024 15:11:36 GMT</pubDate><category>Go</category><category>github.com/argoproj/argo-cd</category><category>github.com/argoproj/argo-cd/v2</category></item><item><title>cortex establishes TLS connections with `InsecureSkipVerify` set to `true` in github.com/cortexproject/cortex</title><link>https://agentprime.io/advisories/GHSA-vw7g-3cc7-7rmh/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vw7g-3cc7-7rmh/</guid><description>github.com/cortexlabs/cortex *, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Aug 2024 22:03:16 GMT</pubDate><category>Go</category><category>github.com/cortexlabs/cortex</category></item><item><title>Beego privilege escalation vulnerability</title><link>https://agentprime.io/advisories/GHSA-r6qh-j42j-pw64/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r6qh-j42j-pw64/</guid><description>github.com/beego/beego/v2 &lt;2.2.1, fixed in 2.2.1. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jul 2024 21:32:38 GMT</pubDate><category>Go</category><category>github.com/beego/beego/v2</category></item><item><title>CVE-2024-41253: goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.</title><link>https://agentprime.io/advisories/CVE-2024-41253/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41253/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jul 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36755: D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL.</title><link>https://agentprime.io/advisories/CVE-2024-36755/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36755/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Jun 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack</title><link>https://agentprime.io/advisories/GHSA-8r96-8889-qg2x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8r96-8889-qg2x/</guid><description>httpie &lt;3.2.3, fixed in 3.2.3. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Nov 2023 18:30:31 GMT</pubDate><category>PyPI</category><category>httpie</category></item><item><title>CVE-2021-21374: Nimble fails to validate certificates due to insecure httpClient defaults</title><link>https://agentprime.io/advisories/CVE-2021-21374/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21374/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Mar 2021 21:25:14 GMT</pubDate><category>CVE</category></item></channel></rss>