# CWE-653.

Every Advisory and CVE whose sources give the weakness CWE-653, newest first.

## Records, newest first

- [Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass](https://agentprime.io/advisories/CVE-2026-113687.md)
  `CVE-2026-113687` · CVE record: Apache Software Foundation Apache Syncope · No CVSS score · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-653
- [Apache Syncope: Remote Code Execution via Flowable JUEL expression](https://agentprime.io/advisories/CVE-2026-109083.md)
  `CVE-2026-109083` · CVE record: Apache Software Foundation Apache Syncope · No CVSS score · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-653
- [Beta9 build sandbox escape via chroot-only isolation](https://agentprime.io/advisories/CVE-2026-120306.md)
  `CVE-2026-120306` · CVE record: beam-cloud Beta9 worker · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Privilege escalation, CWE-653
- [n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes](https://agentprime.io/advisories/CVE-2026-119408.md)
  `CVE-2026-119408` · CVE record: n8n-io n8n · CVSS 8.7 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-653
- [Unrestricted network access between execution contexts in KNIME Business Hub](https://agentprime.io/advisories/CVE-2026-115517.md)
  `CVE-2026-115517` · CVE record: KNIME KNIME Business Hub · CVSS 6.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-653
- [Incorrect authorization checks in Amazon Athena engine version 3 query processing](https://agentprime.io/advisories/CVE-2026-115416.md)
  `CVE-2026-115416` · CVE record: AWS Amazon Athena · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Broken access control, CWE-653
- [JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell](https://agentprime.io/advisories/CVE-2026-109443.md)
  `CVE-2026-109443` · CVE record: jd-opensource JoySafeter · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-653
- [LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge](https://agentprime.io/advisories/CVE-2026-109441.md)
  `CVE-2026-109441` · CVE record: ginlix-ai LangAlpha · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-653
- [\*\*Container Escape\*\* Host user home directory mounted with write access into application container](https://agentprime.io/advisories/CVE-2026-34009.md)
  `CVE-2026-34009` · CVE record: QNAP Systems Inc. Notes Station 3 · CVSS 8.4 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-653
- [Astron Agent: Unsandboxed code-node leads to cross-tenant RCE](https://agentprime.io/advisories/CVE-2026-108263.md)
  `CVE-2026-108263` · CVE record: iflytek astron-agent · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026 · Tags: Code injection, Authentication bypass, Broken access control, CWE-653
- [Ghost: Stored XSS via Embed Card Previews](https://agentprime.io/advisories/GHSA-69qc-f5m6-889c.md)
  `GHSA-69qc-f5m6-889c`, `BIT-ghost-2026-105643`, `CVE-2026-105643` · npm `ghost`: affected `>=6.34.0, <6.67.0`, fixed in `6.67.0` · CVSS 7.3 High · Not analysed yet · Published 7 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-653
- [Cisco NX-OS Software Python Sandbox Escape Vulnerability](https://agentprime.io/advisories/CVE-2026-20032.md)
  `CVE-2026-20032` · CVE record: Cisco Cisco NX-OS Software · CVSS 4.4 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-653
- [OpenBSD OpenSSH: In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect…](https://agentprime.io/advisories/CVE-2026-106588.md)
  `CVE-2026-106588` · CVE record: OpenBSD OpenSSH · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-653
- [vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool](https://agentprime.io/advisories/GHSA-fcqc-726x-5wfc.md)
  `GHSA-fcqc-726x-5wfc`, `CVE-2026-92947` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure, CWE-653
- [Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise](https://agentprime.io/advisories/GHSA-pqxw-g93w-hj9x.md)
  `GHSA-pqxw-g93w-hj9x`, `CVE-2026-114087` · npm `trigger.dev`: affected `<4.5.6`, fixed in `4.5.6` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-653, CWE-1393
- [Kiteworks Core Sandbox Escape](https://agentprime.io/advisories/CVE-2026-102125.md)
  `CVE-2026-102125` · CVE record: Kiteworks Core · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Information disclosure, CWE-653
- [Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group](https://agentprime.io/advisories/CVE-2026-97029.md)
  `CVE-2026-97029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.7 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-653
- [deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation](https://agentprime.io/advisories/CVE-2026-101078.md)
  `CVE-2026-101078` · CVE record: deepseek-ai deepseek-harness · CVSS 4.8 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-653
- [MrSteam iSteamX Improper Isolation or Compartmentalization](https://agentprime.io/advisories/CVE-2026-95699.md)
  `CVE-2026-95699` · CVE record: MrSteam iSteamX application and 1 more · CVSS 8.4 High · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-653
- [Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys](https://agentprime.io/advisories/CVE-2026-82964.md)
  `CVE-2026-82964` · CVE record: Gen Digital Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security and 2 more · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control, CWE-281, CWE-653
- [vivo Kids Mode: A control logic defect in a specific built-in webpage of Kids Mode allows users to view…](https://agentprime.io/advisories/CVE-2026-15366.md)
  `CVE-2026-15366` · CVE record: vivo Kids Mode · CVSS 2.4 Low · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-653
- [Traefik: \`allowCrossNamespace=false\` bypass via \`@kubernetescrd\` TraefikService backendRef](https://agentprime.io/advisories/GHSA-62fc-8686-hfmq.md)
  `GHSA-62fc-8686-hfmq`, `CVE-2026-71325`, `GO-2026-6203` · Go `github.com/traefik/traefik` and 2 more: affected `<=1.7.34`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Broken access control, CWE-653
- [Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation](https://agentprime.io/advisories/CVE-2026-62246.md)
  `CVE-2026-62246` · CVE record: clastix kamaji · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control, CWE-653
- [Boruta dynamic client registration allows creation of over-privileged OAuth clients](https://agentprime.io/advisories/GHSA-w869-fcf2-68vp.md)
  `GHSA-w869-fcf2-68vp`, `CVE-2026-65635`, `EEF-CVE-2026-65635` · Hex `boruta`: affected `>=2.3.0, <2.3.7`, fixed in `2.3.7` · CVSS 8.3 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-653
- [Apache Syncope: Remote Code Execution via Scripted Connector](https://agentprime.io/advisories/CVE-2026-53421.md)
  `CVE-2026-53421` · CVE record: Apache Software Foundation Apache Syncope · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-653
- [Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask](https://agentprime.io/advisories/CVE-2026-53405.md)
  `CVE-2026-53405` · CVE record: Apache Software Foundation Apache Syncope · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-653
- [Apache Syncope: RCE via Groovy Sandbox bypass](https://agentprime.io/advisories/CVE-2026-63071.md)
  `CVE-2026-63071` · CVE record: Apache Software Foundation Apache Syncope · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-653
- [Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller](https://agentprime.io/advisories/CVE-2026-15738.md)
  `CVE-2026-15738` · CVE record: Amazon aws-load-balancer-controller · CVSS 5.8 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-653
- [npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients](https://agentprime.io/advisories/GHSA-gqmf-56h7-rrpf.md)
  `GHSA-gqmf-56h7-rrpf`, `CVE-2026-57135` · npm `praisonai`: affected `>=1.2.3, <1.7.2`, fixed in `1.7.2` · CVSS 7.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-653, CWE-693
- [Sandbox escape due to incorrect boundary conditions in the Networking component](https://agentprime.io/advisories/CVE-2026-12297.md)
  `CVE-2026-12297` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption, CWE-653
- [Sandbox escape in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-12295.md)
  `CVE-2026-12295` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-653, CWE-693
- [GPU DDK - SharedSecMem mapped into all GPU virtual address spaces](https://agentprime.io/advisories/CVE-2026-41155.md)
  `CVE-2026-41155` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-653
- [Apache Syncope has an Improper Isolation or Compartmentalization vulnerability](https://agentprime.io/advisories/GHSA-gq7g-vg2q-jvq3.md)
  `GHSA-gq7g-vg2q-jvq3`, `CVE-2026-42782` · Maven `org.apache.syncope.core:syncope-core-spring`: affected `>=3.0.0-M0, <=3.0.16 || >=4.0.0-M0, <4.0.6 || >=4.1.0-M0, <4.1.1`, fixed in `4.0.6`, `4.1.1` · CVSS 7.2 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-653
- [Sandbox escape in Firefox and Firefox Focus for Android](https://agentprime.io/advisories/CVE-2026-8945.md)
  `CVE-2026-8945` · CVE record: Mozilla Firefox · CVSS 7.5 High · Not analysed yet · Published 19 May 2026 · Tags: CWE-653, CWE-693
- [Sandbox escape in the Profile Backup component](https://agentprime.io/advisories/CVE-2026-8401.md)
  `CVE-2026-8401` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: CWE-653, CWE-693
- [vm2 has Sandbox Breakout Through Null Proto Exception](https://agentprime.io/advisories/GHSA-9vg3-4rfj-wgcm.md)
  `GHSA-9vg3-4rfj-wgcm`, `CVE-2026-44009` · npm `vm2`: affected `<3.11.2`, fixed in `3.11.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Information disclosure, CWE-653
- [vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape](https://agentprime.io/advisories/GHSA-vwrp-x96c-mhwq.md)
  `GHSA-vwrp-x96c-mhwq`, `CVE-2026-44005` · npm `vm2`: affected `>=3.9.6, <3.11.0`, fixed in `3.11.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection, Prototype pollution, CWE-653
- [vm2 Access to Host Object Enables Sandbox Escape](https://agentprime.io/advisories/GHSA-47x8-96vw-5wg6.md)
  `GHSA-47x8-96vw-5wg6`, `CVE-2026-43997` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection, CWE-653
- [VM2 Has a WASM Sandbox Escape](https://agentprime.io/advisories/GHSA-ffh4-j6h5-pg66.md)
  `GHSA-ffh4-j6h5-pg66`, `CVE-2026-26956` · npm `vm2`: affected `<3.10.5`, fixed in `3.10.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has a Sandbox Escape Issue via SuppressedError](https://agentprime.io/advisories/GHSA-55hx-c926-fr95.md)
  `GHSA-55hx-c926-fr95`, `CVE-2026-26332` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has Sandbox Breakout Through Inspect Function](https://agentprime.io/advisories/GHSA-v37h-5mfm-c47c.md)
  `GHSA-v37h-5mfm-c47c`, `CVE-2026-24781` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [Spring gRPC SecurityContext leaks across requests upon authorization failure](https://agentprime.io/advisories/GHSA-4g9c-3x4p-mfpp.md)
  `GHSA-4g9c-3x4p-mfpp`, `CVE-2026-40968` · Maven `org.springframework.grpc:spring-grpc`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 4.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-653
- [Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding](https://agentprime.io/advisories/GHSA-xhjw-95fp-8vgq.md)
  `GHSA-xhjw-95fp-8vgq`, `CVE-2026-41174`, `GO-2026-5760` · Go `github.com/traefik/traefik` and 2 more: affected `<=1.7.34`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: Broken access control, CWE-653
- [A new API endpoint introduced in pretix 2025 that is supposed to](https://agentprime.io/advisories/GHSA-wr8q-c73g-m7gp.md)
  `GHSA-wr8q-c73g-m7gp`, `CVE-2026-5600`, `PYSEC-2026-111` · PyPI `pretix`: affected `>=2025.10.0, <2026.1.2 || >=2026.2.0, <2026.2.1 || >=2026.3.0, <2026.3.1`, fixed in `2026.1.2`, `2026.2.1`, `2026.3.1` · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-653
- [API allows deletion of users of other instance](https://agentprime.io/advisories/CVE-2026-5599.md)
  `CVE-2026-5599` · CVE record: pretix Venueless · CVSS 7.3 High · Not analysed yet · Published 5 Apr 2026 · Tags: CWE-653
- [Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes](https://agentprime.io/advisories/GHSA-xwr5-m59h-vwqr.md)
  `GHSA-xwr5-m59h-vwqr`, `CVE-2026-34775` · npm `electron`: affected `<38.8.6 || >=39.0.0-alpha.1, <39.8.4 || >=40.0.0-alpha.1, <40.8.4 || >=41.0.0-alpha.1, <41.0.0`, fixed in `38.8.6`, `39.8.4`, `40.8.4`, `41.0.0` · CVSS 6.8 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-653
- [Keycloak: Replay of action tokens via improper handling of single-use entries](https://agentprime.io/advisories/GHSA-rx66-hj7g-28h7.md)
  `GHSA-rx66-hj7g-28h7`, `BIT-keycloak-2026-4325`, `CVE-2026-4325` · Maven `org.keycloak:keycloak-services`: affected `<26.5.7`, fixed in `26.5.7` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-653
- [Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw](https://agentprime.io/advisories/GHSA-hj93-h7pg-fh6v.md)
  `GHSA-hj93-h7pg-fh6v`, `BIT-keycloak-2026-4282`, `CVE-2026-4282` · Maven `org.keycloak:keycloak-services`: affected `<26.5.7`, fixed in `26.5.7` · CVSS 7.4 High · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-653
- [Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy](https://agentprime.io/advisories/CVE-2025-12805.md)
  `CVE-2025-12805` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 1 more · CVSS 8.1 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-653
- [Sandbox escape in the Responsive Design Mode component](https://agentprime.io/advisories/CVE-2026-4692.md)
  `CVE-2026-4692` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-653
- [Remote Code Execution in ServiceNow AI Platform](https://agentprime.io/advisories/CVE-2026-0542.md)
  `CVE-2026-0542` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-653
- [MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability](https://agentprime.io/advisories/GHSA-pfv4-wmph-5gc6.md)
  `GHSA-pfv4-wmph-5gc6`, `CVE-2026-25905`, `PYSEC-2026-2628` · PyPI `mcp-run-python`: affected `<=0.0.22`, no fixed version yet · CVSS 5.8 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-653
- [Network boundaries not respected in certain Foundry namespaces.](https://agentprime.io/advisories/CVE-2025-53710.md)
  `CVE-2025-53710` · CVE record: Palantir com.palantir.compute:compute-service and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2025 · Tags: CWE-653
- [Fortinet FortiSandbox: An Improper Isolation or Compartmentalization vulnerability \[CWE-653\] in Fortinet…](https://agentprime.io/advisories/CVE-2025-46215.md)
  `CVE-2025-46215` · CVE record: Fortinet FortiSandbox · CVSS 5.0 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-653
- [Incorrect oauth passthrough in Grafana Databricks Datasource](https://agentprime.io/advisories/CVE-2025-41116.md)
  `CVE-2025-41116` · CVE record: Grafana Labs Grafana Databricks Datasource Plugin · CVSS 2.1 Low · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-653
- [Incorrect oauth passthrough in Grafana Snowflake Datasource](https://agentprime.io/advisories/CVE-2025-3717.md)
  `CVE-2025-3717` · CVE record: Grafana Labs Grafana Snowflake Datasource Plugin · CVSS 2.1 Low · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-653
- [DSPy does not properly restrict file reads](https://agentprime.io/advisories/GHSA-vvw2-h478-xwr3.md)
  `GHSA-vvw2-h478-xwr3`, `CVE-2025-12695`, `PYSEC-2026-1318` · PyPI `dspy`: affected `<=3.0.3`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-653
- [Apache Syncope allows malicious administrators to inject Groovy code](https://agentprime.io/advisories/GHSA-825g-mm5v-ggq4.md)
  `GHSA-825g-mm5v-ggq4`, `CVE-2025-57738` · Maven `org.apache.syncope.core:syncope-core-spring`: affected `<3.0.14 || >=4.0.0-M0, <4.0.2`, fixed in `3.0.14`, `4.0.2` · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 20 Oct 2025 · Tags: CWE-653
- [Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances](https://agentprime.io/advisories/CVE-2025-34201.md)
  `CVE-2025-34201` · CVE record: Vasion Print Virtual Appliance Host and 1 more · CVSS 8.5 High · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-653
- [Intel(R) Processors: Improper Isolation or Compartmentalization in the stream cache mechanism for some…](https://agentprime.io/advisories/CVE-2025-20109.md)
  `CVE-2025-20109` · CVE record: Intel(R) Processors · CVSS 7.3 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-653

Older: <https://agentprime.io/advisories/tag/cwe-653.md?cursor=WyIyMDI1LTA4LTEyVDE2OjU4OjE4LjM3NzAwMFoiLCJDVkUtMjAyNS0yMDEwOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-653>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-653/>. Everything for agents: <https://agentprime.io/llms.txt>.