<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-626</title><description>Every new CWE-626 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116130: HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request</title><link>https://agentprime.io/advisories/CVE-2026-116130/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116130/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 12:38:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76816: Netty: MQTT Topic Name and Client ID Validation Bypass</title><link>https://agentprime.io/advisories/CVE-2026-76816/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76816/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 19:53:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62380: Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection</title><link>https://agentprime.io/advisories/CVE-2026-62380/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62380/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 12:26:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42010: Gnutls: gnutls: authentication bypass via nul character in username</title><link>https://agentprime.io/advisories/CVE-2026-42010/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42010/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 May 2026 12:00:05 GMT</pubDate><category>CVE</category></item><item><title>Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)</title><link>https://agentprime.io/advisories/GHSA-cm33-6792-r9fm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cm33-6792-r9fm/</guid><description>io.netty:netty-codec-dns &gt;=4.2.0.Alpha1, &lt;4.2.13.Final || &lt;4.1.133.Final, fixed in 4.2.13.Final, 4.1.133.Final. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 07 May 2026 00:12:47 GMT</pubDate><category>Maven</category><category>io.netty:netty-codec-dns</category></item><item><title>Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams</title><link>https://agentprime.io/advisories/GHSA-xhjh-pmcv-23jw/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-xhjh-pmcv-23jw/</guid><description>axios &lt;0.31.1 || &gt;=1.0.0, &lt;1.15.1, fixed in 0.31.1, 1.15.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 00:18:03 GMT</pubDate><category>npm</category><category>axios</category></item><item><title>CVE-2020-10773: [UNKNOWN] kernel: A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory…</title><link>https://agentprime.io/advisories/CVE-2020-10773/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-10773/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2020 16:07:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-17137: NETGEAR AC1200: This vulnerability allows network-adjacent attackers to bypass authentication on affected…</title><link>https://agentprime.io/advisories/CVE-2019-17137/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-17137/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Feb 2020 19:15:38 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2019-11936: Facebook HHVM: Various APC functions accept keys containing null bytes as input…</title><link>https://agentprime.io/advisories/CVE-2019-11936/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-11936/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Dec 2019 16:25:20 GMT</pubDate><category>CVE</category></item></channel></rss>