agentprime: CWE-67

Werkzeug safe_join() allows Windows special device names

Mon, 05 Oct 2026 23:48:39 GMT

werkzeug <3.1.9, fixed in 3.1.9. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-17545: PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS

Fri, 25 Sep 2026 20:18:11 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Werkzeug safe_join() allows Windows special device names

Thu, 19 Feb 2026 20:32:45 GMT

werkzeug <3.1.6, fixed in 3.1.6. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Werkzeug safe_join() allows Windows special device names with compound extensions

Thu, 08 Jan 2026 19:51:21 GMT

werkzeug <3.1.5, fixed in 3.1.5. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Werkzeug safe_join() allows Windows special device names

Tue, 02 Dec 2025 00:27:38 GMT

werkzeug <3.1.4, fixed in 3.1.4. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wasmtime doesn't fully sandbox all the Windows device filenames

Sat, 02 Nov 2024 12:00:00 GMT

wasmtime >=0.0.0-0, <24.0.2 || >=25.0.0, <25.0.3 || >=26.0.0, <26.0.1, fixed in 24.0.2, 25.0.3, 26.0.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Refs and paths with reserved Windows device names access the devices

Wed, 22 May 2024 12:00:00 GMT

gix-ref >=0.0.0-0, <0.44.0, fixed in 0.44.0. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.