# CWE-61.

Every Advisory and CVE whose sources give the weakness CWE-61, newest first.

## Records, newest first (an older page)

- [runc container escape via "masked path" abuse due to mount race conditions](https://agentprime.io/advisories/GHSA-9493-h29p-rfm2.md)
  `GHSA-9493-h29p-rfm2`, `CVE-2025-31133`, `GO-2025-4096` · Go `github.com/opencontainers/runc`: affected `<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3`, fixed in `1.2.8`, `1.3.3`, `1.4.0-rc.3` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [Dell SupportAssist for Home PCs: SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs…](https://agentprime.io/advisories/CVE-2025-43991.md)
  `CVE-2025-43991` · CVE record: Dell SupportAssist for Home PCs and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 13 Oct 2025 · Tags: CWE-61
- [wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink](https://agentprime.io/advisories/CVE-2025-11489.md)
  `CVE-2025-11489` · CVE record: wonderwhy-er DesktopCommanderMCP · CVSS 2.0 Low · Not analysed yet · Published 8 Oct 2025 · Tags: Path traversal, CWE-61
- [Claude Code permission deny bypass through symlink](https://agentprime.io/advisories/GHSA-66m2-gx93-v996.md)
  `GHSA-66m2-gx93-v996`, `CVE-2025-59829` · npm `@anthropic-ai/claude-code`: affected `<1.0.120`, fixed in `1.0.120` · CVSS 2.3 Low · Not analysed yet · Published 3 Oct 2025 · Tags: CWE-61
- [SUSE-specific logrotate configuration allows escalation from mail user/group to root](https://agentprime.io/advisories/CVE-2025-53881.md)
  `CVE-2025-53881` · CVE record: openSUSE Tumbleweed · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2025 · Tags: CWE-61
- [tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball](https://agentprime.io/advisories/GHSA-vj76-c3g6-qr5v.md)
  `GHSA-vj76-c3g6-qr5v`, `CVE-2025-59343` · npm `tar-fs`: affected `<1.16.6 || >=2.0.0, <2.1.4 || >=3.0.0, <3.1.1`, fixed in `1.16.6`, `2.1.4`, `3.1.1` · CVSS 8.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: Path traversal, CWE-61
- [astral-tokio-tar has a path traversal in tar extraction](https://agentprime.io/advisories/GHSA-3wgq-wrwc-vqmv.md)
  `GHSA-3wgq-wrwc-vqmv`, `CVE-2025-59825` · crates.io `astral-tokio-tar`: affected `<0.5.4`, fixed in `0.5.4` · CVSS 6.1 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Path traversal, CWE-61
- [Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices](https://agentprime.io/advisories/CVE-2025-10854.md)
  `CVE-2025-10854` · CVE record · CVSS 8.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: CWE-61
- [podman kube play symlink traversal vulnerability](https://agentprime.io/advisories/GHSA-wp3j-xq48-xpjw.md)
  `GHSA-wp3j-xq48-xpjw`, `CVE-2025-9566`, `GO-2025-3935` · Go `github.com/containers/podman/v4` and 1 more: affected `<=4.9.5`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 4 Sept 2025 · Tags: Path traversal, CWE-61
- [openSUSE Tumbleweed: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE…](https://agentprime.io/advisories/CVE-2025-46810.md)
  `CVE-2025-46810` · CVE record: openSUSE Tumbleweed · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-61
- [Airlink's Daemon Symlink Vulnerability](https://agentprime.io/advisories/CVE-2025-57802.md)
  `CVE-2025-57802` · CVE record: airlinklabs daemon · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2025 · Tags: CWE-61
- [n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files](https://agentprime.io/advisories/GHSA-ggjm-f3g4-rwmm.md)
  `GHSA-ggjm-f3g4-rwmm`, `CVE-2025-57749` · npm `n8n`: affected `<1.106.0`, fixed in `1.106.0` · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Path traversal, CWE-61
- [Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.](https://agentprime.io/advisories/GHSA-j26p-6wx7-f3pw.md)
  `GHSA-j26p-6wx7-f3pw`, `CVE-2025-54867` · crates.io `youki`: affected `<0.5.5`, fixed in `0.5.5` · CVSS 7.0 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-61
- [Unsafe symlink following in restricted workspace-write sandbox leads to RCE](https://agentprime.io/advisories/CVE-2025-55345.md)
  `CVE-2025-55345` · CVE record · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2025 · Tags: CWE-61
- [Ivanti Connect Secure: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or…](https://agentprime.io/advisories/CVE-2025-5468.md)
  `CVE-2025-5468` · CVE record: Ivanti Connect Secure and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-61
- [Dell Encryption Admin Utilities: Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link…](https://agentprime.io/advisories/CVE-2025-36564.md)
  `CVE-2025-36564` · CVE record: Dell Encryption Admin Utilities · CVSS 7.8 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-61
- [daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root](https://agentprime.io/advisories/CVE-2025-23394.md)
  `CVE-2025-23394` · CVE record: SUSE openSUSE Tumbleweed · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2025 · Tags: CWE-61
- [iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature](https://agentprime.io/advisories/CVE-2025-43853.md)
  `CVE-2025-43853` · CVE record: bytecodealliance wasm-micro-runtime · CVSS 7.0 High · Not analysed yet · Published 15 May 2025 · Tags: CWE-61
- [RCE In Google Web Designer](https://agentprime.io/advisories/CVE-2025-1079.md)
  `CVE-2025-1079` · CVE record: Google Web Designer · CVSS 7.8 High · Not analysed yet · Published 12 May 2025 · Tags: CWE-61
- [UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers.](https://agentprime.io/advisories/CVE-2025-30485.md)
  `CVE-2025-30485` · CVE record: Century Systems Co., Ltd. FutureNet NXR-1420 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-61
- [AWS SAM CLI Path Traversal allows file copy to local cache](https://agentprime.io/advisories/GHSA-pp64-wj43-xqcr.md)
  `GHSA-pp64-wj43-xqcr`, `CVE-2025-3048`, `PYSEC-2026-1206` · PyPI `aws-sam-cli`: affected `<1.134.0`, fixed in `1.134.0` · CVSS 6.9 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Path traversal, CWE-61
- [AWS SAM CLI Path Traversal allows file copy to build container](https://agentprime.io/advisories/GHSA-px37-jpqx-97q9.md)
  `GHSA-px37-jpqx-97q9`, `CVE-2025-3047`, `PYSEC-2026-1207` · PyPI `aws-sam-cli`: affected `<1.133.0`, fixed in `1.133.0` · CVSS 6.9 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Path traversal, CWE-61
- [Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write](https://agentprime.io/advisories/GHSA-94vh-gphv-8pm8.md)
  `GHSA-94vh-gphv-8pm8`, `CVE-2025-29787`, `RUSTSEC-2025-0168` · crates.io `zip`: affected `>=1.3.0, <2.3.0`, fixed in `2.3.0` · CVSS 7.3 High · Not analysed yet · Published 16 Mar 2025 · Tags: Path traversal, CWE-61, CWE-180
- [Arbitrary file overwrite during home directory recovery due to improper symbolic link handling.](https://agentprime.io/advisories/CVE-2025-24832.md)
  `CVE-2025-24832` · CVE record: Acronis Acronis Backup plugin for cPanel & WHM and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 27 Feb 2025 · Tags: CWE-61
- [Zoom Apps for macOS - Symbolic Link Following](https://agentprime.io/advisories/CVE-2024-45418.md)
  `CVE-2024-45418` · CVE record: Zoom Communications, Inc Zoom Apps for macOS · CVSS 5.4 Medium · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-61
- [Dell SupportAssist OS Recovery: Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack…](https://agentprime.io/advisories/CVE-2025-22480.md)
  `CVE-2025-22480` · CVE record: Dell Dell SupportAssist OS Recovery · CVSS 7.0 High · Not analysed yet · Published 13 Feb 2025 · Tags: CWE-61
- [pwn.college has Symlink LFI in Dojo repos](https://agentprime.io/advisories/CVE-2025-24886.md)
  `CVE-2025-24886` · CVE record: pwncollege dojo · CVSS 7.7 High · Not analysed yet · Published 30 Jan 2025 · Tags: Information disclosure, CWE-61
- [Insecure Temporary File usage in github.com/golang/glog](https://agentprime.io/advisories/GHSA-6wxm-mpqj-6jpf.md)
  `GHSA-6wxm-mpqj-6jpf`, `CVE-2024-45339`, `GO-2025-3372` · Go `github.com/golang/glog`: affected `<1.2.4`, fixed in `1.2.4` · CVSS 7.1 High · Not analysed yet · Published 28 Jan 2025 · Tags: CWE-61, CWE-377
- [Remote Command Execution in file editing in gogs in gogs.io/gogs](https://agentprime.io/advisories/GHSA-r7j8-5h9c-f6fx.md)
  `GHSA-r7j8-5h9c-f6fx`, `CVE-2024-54148`, `GO-2024-3355` · Go `gogs.io/gogs`: affected `<0.13.1`, fixed in `0.13.1` · CVSS 8.7 High · Not analysed yet · Published 7 Jan 2025 · Tags: Path traversal, CWE-61
- [Dell SupportAssist for Home PCs: Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for…](https://agentprime.io/advisories/CVE-2024-52535.md)
  `CVE-2024-52535` · CVE record: Dell SupportAssist for Home PCs and 1 more · CVSS 7.1 High · Not analysed yet · Published 25 Dec 2024 · Tags: CWE-61
- [Pagure: generate_archive() follows symbolic links in temporary clones](https://agentprime.io/advisories/CVE-2024-47515.md)
  `CVE-2024-47515` · CVE record · CVSS 8.1 High · Not analysed yet · Published 24 Dec 2024 · Tags: CWE-61
- [Dell Inventory Collector Client: Dell Inventory Collector Client, versions prior to 12.7.0…](https://agentprime.io/advisories/CVE-2024-47480.md)
  `CVE-2024-47480` · CVE record: Dell Inventory Collector Client · CVSS 7.8 High · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-61
- [Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability.](https://agentprime.io/advisories/CVE-2024-52542.md)
  `CVE-2024-52542` · CVE record: Dell AppSync · CVSS 4.4 Medium · Not analysed yet · Published 17 Dec 2024 · Tags: CWE-61
- [Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability.](https://agentprime.io/advisories/CVE-2024-52537.md)
  `CVE-2024-52537` · CVE record: Dell Dell Client Platform BIOS · CVSS 6.3 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: CWE-61
- [readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.](https://agentprime.io/advisories/CVE-2024-54661.md)
  `CVE-2024-54661` · CVE record: dest-unreach socat · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-61
- [Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata](https://agentprime.io/advisories/GHSA-hrxh-9w67-g4cv.md)
  `GHSA-hrxh-9w67-g4cv`, `BIT-rclone-2024-52522`, `CVE-2024-52522`, `GO-2024-3271` · Go `github.com/rclone/rclone`: affected `>=1.59.0, <1.68.2`, fixed in `1.68.2` · CVSS 5.4 Medium · Not analysed yet · Published 19 Nov 2024 · Tags: Path traversal, CWE-61, CWE-281
- [Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2023-20091.md)
  `CVE-2023-20091` · CVE record: Cisco Cisco TelePresence Endpoint Software (TC/CE) · CVSS 5.1 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-61
- [Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2023-20092.md)
  `CVE-2023-20092` · CVE record: Cisco Cisco RoomOS Software and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-61
- [Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2023-20093.md)
  `CVE-2023-20093` · CVE record: Cisco Cisco RoomOS Software and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-61
- [Sensitive information disclosure during file browsing due to improper symbolic link handling.](https://agentprime.io/advisories/CVE-2024-34015.md)
  `CVE-2024-34015` · CVE record: Acronis Acronis Backup plugin for cPanel & WHM · CVSS 3.3 Low · Not analysed yet · Published 11 Nov 2024 · Tags: CWE-61
- [Arbitrary file overwrite during recovery due to improper symbolic link handling.](https://agentprime.io/advisories/CVE-2024-34014.md)
  `CVE-2024-34014` · CVE record: Acronis Acronis Backup plugin for cPanel & WHM and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2024 · Tags: CWE-61
- [NVIDIA Container Toolkit: NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability…](https://agentprime.io/advisories/CVE-2024-0134.md)
  `CVE-2024-0134` · CVE record: NVIDIA NVIDIA Container Toolkit and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-61
- [Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. in github.com/codeclysm/extract](https://agentprime.io/advisories/GHSA-8rm2-93mq-jqhc.md)
  `GHSA-8rm2-93mq-jqhc`, `CVE-2024-47877`, `GO-2024-3196` · Go `github.com/codeclysm/extract` and 2 more: affected `*`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal, CWE-61
- [This issue was addressed with improved handling of symlinks.](https://agentprime.io/advisories/CVE-2024-44132.md)
  `CVE-2024-44132` · CVE record: Apple macOS · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-61
- [runc can be confused to create empty files/directories on the host](https://agentprime.io/advisories/GHSA-jfvp-7x6p-h2pv.md)
  `GHSA-jfvp-7x6p-h2pv`, `CVE-2024-45310`, `GO-2024-3110` · Go `github.com/opencontainers/runc`: affected `<1.1.14 || >=1.2.0-rc.1, <1.2.0-rc.3`, fixed in `1.1.14`, `1.2.0-rc.3` · CVSS 3.6 Low · Not analysed yet · Published 3 Sept 2024 · Tags: CWE-61, CWE-363
- [Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link…](https://agentprime.io/advisories/CVE-2024-39578.md)
  `CVE-2024-39578` · CVE record: Dell PowerScale OneFS · CVSS 6.3 Medium · Not analysed yet · Published 31 Aug 2024 · Tags: CWE-61
- [Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes](https://agentprime.io/advisories/GHSA-6qfg-8799-r575.md)
  `GHSA-6qfg-8799-r575`, `CVE-2019-11251`, `GO-2022-0802` · Go `k8s.io/kubernetes`: affected `>=1.13.10, <1.13.11 || >=1.14.6, <1.14.7 || >=1.15.3, <1.16.0`, fixed in `1.13.11`, `1.14.7`, `1.16.0` · CVSS 4.8 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-61
- [Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd](https://agentprime.io/advisories/GHSA-q4w5-4gq2-98vm.md)
  `GHSA-q4w5-4gq2-98vm`, `CVE-2022-31036`, `GO-2022-0499` · Go `github.com/argoproj/argo-cd` and 1 more: affected `>=1.3.0`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-20, CWE-61
- [In aiohttp, compressed files as symlinks are not protected from path traversal](https://agentprime.io/advisories/GHSA-jwhx-xcg6-8xhj.md)
  `GHSA-jwhx-xcg6-8xhj`, `CVE-2024-42367`, `PYSEC-2026-1108` · PyPI `aiohttp`: affected `>=3.10.0b1, <3.10.2`, fixed in `3.10.2` · CVSS 4.8 Medium · Not analysed yet · Published 9 Aug 2024 · Tags: CWE-61
- [This issue was addressed with improved validation of symlinks.](https://agentprime.io/advisories/CVE-2024-27872.md)
  `CVE-2024-27872` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-61
- [Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link](https://agentprime.io/advisories/CVE-2024-28189.md)
  `CVE-2024-28189` · CVE record: judge0 judge0 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2024 · Tags: Path traversal, CWE-61
- [Judge0 vulnerable to Sandbox Escape via Symbolic Link](https://agentprime.io/advisories/CVE-2024-28185.md)
  `CVE-2024-28185` · CVE record: judge0 judge0 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2024 · Tags: Path traversal, CWE-61
- [An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete.](https://agentprime.io/advisories/CVE-2024-22014.md)
  `CVE-2024-22014` · CVE record · CVSS 8.8 High · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-61
- [Dell PowerScale OneFS: Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link…](https://agentprime.io/advisories/CVE-2024-25953.md)
  `CVE-2024-25953` · CVE record: Dell PowerScale OneFS · CVSS 6.0 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-61
- [Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link…](https://agentprime.io/advisories/CVE-2024-25952.md)
  `CVE-2024-25952` · CVE record: Dell PowerScale OneFS · CVSS 6.0 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-61
- [ZSATrayManager Arbitrary File Deletion](https://agentprime.io/advisories/CVE-2023-41969.md)
  `CVE-2023-41969` · CVE record: Zscaler Client Connector · CVSS 7.3 High · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-61
- [Improper symlink resolution in TeamViewer Remote client for macOS](https://agentprime.io/advisories/CVE-2024-1933.md)
  `CVE-2024-1933` · CVE record: TeamViewer Remote Client · CVSS 7.1 High · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-61
- [This issue was addressed with improved handling of symlinks.](https://agentprime.io/advisories/CVE-2024-23285.md)
  `CVE-2024-23285` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-61
- [Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installati…](https://agentprime.io/advisories/CVE-2023-39246.md)
  `CVE-2023-39246` · CVE record: Dell Dell Encryption, Dell Endpoint Security Suite Enterprise, Dell Security Management Server (Windows) · CVSS 4.6 Medium · Not analysed yet · Published 16 Nov 2023 · Tags: CWE-61
- [Arbitrary File Creation in AbstractUnArchiver](https://agentprime.io/advisories/GHSA-wh3p-fphp-9h2m.md)
  `GHSA-wh3p-fphp-9h2m`, `CVE-2023-37460` · Maven `org.codehaus.plexus:plexus-archiver`: affected `<4.8.0`, fixed in `4.8.0` · CVSS 8.1 High · Not analysed yet · Published 25 Jul 2023 · Tags: Path traversal, CWE-61

Newest: <https://agentprime.io/advisories/tag/cwe-61.md>
Older: <https://agentprime.io/advisories/tag/cwe-61.md?cursor=WyIyMDIzLTA3LTI1VDE3OjIwOjQzLjAwMDAwMFoiLCJHSFNBLXdoM3AtZnBocC05aDJtIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-61&cursor=WyIyMDI1LTExLTA1VDE3OjM0OjQ5LjAwMDAwMFoiLCJHSFNBLXF3OXgtY3FyMy13YzdyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-61/?cursor=WyIyMDI1LTExLTA1VDE3OjM0OjQ5LjAwMDAwMFoiLCJHSFNBLXF3OXgtY3FyMy13YzdyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.