agentprime: CWE-625Every new CWE-625 Advisory and CVE.https://agentprime.io/CVE-2026-120645: CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_listhttps://agentprime.io/advisories/CVE-2026-120645/https://agentprime.io/advisories/CVE-2026-120645/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:40:54 GMTCVECVE-2026-120631: CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parsehttps://agentprime.io/advisories/CVE-2026-120631/https://agentprime.io/advisories/CVE-2026-120631/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:39:55 GMTCVECVE-2026-118995: CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidatorhttps://agentprime.io/advisories/CVE-2026-118995/https://agentprime.io/advisories/CVE-2026-118995/Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:10:38 GMTCVEWails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOriginshttps://agentprime.io/advisories/GHSA-47hv-j4px-h3c9/https://agentprime.io/advisories/GHSA-47hv-j4px-h3c9/github.com/wailsapp/wails/v2 >=2.0.0, <2.13.0, fixed in 2.13.0. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 13:29:47 GMTGogithub.com/wailsapp/wails/v2CVE-2026-14814: Permissive Regular Expression in GitLabhttps://agentprime.io/advisories/CVE-2026-14814/https://agentprime.io/advisories/CVE-2026-14814/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 01:08:26 GMTCVEJupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)https://agentprime.io/advisories/GHSA-3jqq-pw4j-pqcj/https://agentprime.io/advisories/GHSA-3jqq-pw4j-pqcj/jupyterlab >=3.0.0, <4.5.11 || >=4.6.0, <4.6.4, fixed in 4.5.11, 4.6.4. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 01 Oct 2026 15:22:17 GMTPyPIjupyterlabjupyterlite-coreAstro: Netlify Image CDN allowlist bypass enables SSRFhttps://agentprime.io/advisories/GHSA-4233-jc72-56c5/https://agentprime.io/advisories/GHSA-4233-jc72-56c5/@astrojs/netlify >=5.2.0, <8.2.4, fixed in 8.2.4. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 30 Sep 2026 23:40:12 GMTnpm@astrojs/netlifyCVE-2026-79965: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability.https://agentprime.io/advisories/CVE-2026-79965/https://agentprime.io/advisories/CVE-2026-79965/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 12:51:15 GMTCVExmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminatorhttps://agentprime.io/advisories/GHSA-jxjr-3g7g-3944/https://agentprime.io/advisories/GHSA-jxjr-3g7g-3944/@xmldom/xmldom >=0.9.11, <0.9.12, fixed in 0.9.12. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 21:03:17 GMTnpm@xmldom/xmldomxmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization pathhttps://agentprime.io/advisories/GHSA-3px3-54cx-rmw9/https://agentprime.io/advisories/GHSA-3px3-54cx-rmw9/@xmldom/xmldom >=0.9.0, <0.9.12, fixed in 0.9.12. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 21:02:33 GMTnpm@xmldom/xmldomxmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminatorhttps://agentprime.io/advisories/GHSA-vr34-hp96-76pp/https://agentprime.io/advisories/GHSA-vr34-hp96-76pp/@xmldom/xmldom >=0.9.10, <0.9.12, fixed in 0.9.12. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 08 Sep 2026 21:02:25 GMTnpm@xmldom/xmldomCKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)https://agentprime.io/advisories/GHSA-83x6-42hr-jc76/https://agentprime.io/advisories/GHSA-83x6-42hr-jc76/@aborruso/ckan-mcp-server <0.4.112, fixed in 0.4.112. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 02 Sep 2026 14:52:21 GMTnpm@aborruso/ckan-mcp-serverAshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenanthttps://agentprime.io/advisories/GHSA-rpf8-q9jh-qxrr/https://agentprime.io/advisories/GHSA-rpf8-q9jh-qxrr/ash_phoenix >=2.1.26, <2.3.25, fixed in 2.3.25. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 31 Aug 2026 03:05:38 GMTHexash_phoenixPraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)https://agentprime.io/advisories/GHSA-6g6r-q6gw-w8fg/https://agentprime.io/advisories/GHSA-6g6r-q6gw-w8fg/praisonai <4.6.58, fixed in 4.6.58. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 25 Aug 2026 15:22:16 GMTPyPIpraisonaicriticalCVE-2026-19278: Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappingshttps://agentprime.io/advisories/CVE-2026-19278/https://agentprime.io/advisories/CVE-2026-19278/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 12:13:40 GMTCVECVE-2026-64940: Nishishi Factory Tegalog -Fumy Otegaru Memo Logger-: Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability…https://agentprime.io/advisories/CVE-2026-64940/https://agentprime.io/advisories/CVE-2026-64940/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 07:09:50 GMTCVEsanic-cors contains an improper regular expression in the try_match() functionhttps://agentprime.io/advisories/GHSA-94jw-hqvj-vw74/https://agentprime.io/advisories/GHSA-94jw-hqvj-vw74/sanic-cors <=2.2.0, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 05 Jun 2026 15:32:25 GMTPyPIsanic-corsCarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharactershttps://agentprime.io/advisories/GHSA-7g26-2qgj-chfg/https://agentprime.io/advisories/GHSA-7g26-2qgj-chfg/carrierwave <2.2.7 || >=3.0.0.beta, <3.1.3, fixed in 2.2.7, 3.1.3. CVSS 4.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 27 May 2026 00:03:11 GMTRubyGemscarrierwaveJupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`https://agentprime.io/advisories/GHSA-24qx-w28j-9m6p/https://agentprime.io/advisories/GHSA-24qx-w28j-9m6p/jupyter-server <2.18.0, fixed in 2.18.0. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 16:54:31 GMTPyPIjupyter-serverRack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirecthttps://agentprime.io/advisories/GHSA-qv7j-4883-hwh7/https://agentprime.io/advisories/GHSA-qv7j-4883-hwh7/rack <2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6, fixed in 2.2.23, 3.1.21, 3.2.6. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 02 Apr 2026 20:35:23 GMTRubyGemsrackRack has a root directory disclosure via unescaped regex interpolation in Rack::Directoryhttps://agentprime.io/advisories/GHSA-7mqq-6cf9-v2qp/https://agentprime.io/advisories/GHSA-7mqq-6cf9-v2qp/rack <2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6, fixed in 2.2.23, 3.1.21, 3.2.6. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 02 Apr 2026 20:32:42 GMTRubyGemsrackOpenClaw: Exec approval allowlist patterns overmatched on POSIX pathshttps://agentprime.io/advisories/GHSA-f8r2-vg7x-gh8m/https://agentprime.io/advisories/GHSA-f8r2-vg7x-gh8m/openclaw <2026.3.11, fixed in 2026.3.11. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 13 Mar 2026 20:55:03 GMTnpmopenclawCVE-2026-23651: Microsoft ACI Confidential Containers Elevation of Privilege Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-23651/https://agentprime.io/advisories/CVE-2026-23651/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 22:18:19 GMTCVEKeycloak Authorization Bypass vulnerabilityhttps://agentprime.io/advisories/GHSA-46c8-635v-68r2/https://agentprime.io/advisories/GHSA-46c8-635v-68r2/org.keycloak:keycloak-services <22.0.10 || >=23.0.0, <24.0.3, fixed in 22.0.10, 24.0.3. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 17 Apr 2024 17:33:29 GMTMavenorg.keycloak:keycloak-servicesImproper Input Validation in Google Closure Libraryhttps://agentprime.io/advisories/GHSA-vh5w-fg69-rc8m/https://agentprime.io/advisories/GHSA-vh5w-fg69-rc8m/google-closure-library <20200315.0.0, fixed in 20200315.0.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 07 May 2021 16:06:34 GMTnpmgoogle-closure-libraryCVE-2018-8926: Synology Photo Station: Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo…https://agentprime.io/advisories/CVE-2018-8926/https://agentprime.io/advisories/CVE-2018-8926/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Jun 2018 13:00:00 GMTCVE