# CWE-670.

Every Advisory and CVE whose sources give the weakness CWE-670, newest first.

## Records, newest first (an older page)

- [ismp-grandpa crate accepted incorrect signatures](https://agentprime.io/advisories/GHSA-wwx5-gpgr-vxr7.md)
  `GHSA-wwx5-gpgr-vxr7`, `CVE-2025-24800` · crates.io `grandpa-verifier` and 2 more: affected `<0.1.2`, fixed in `0.1.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Jan 2025 · Tags: Weak cryptography or TLS, CWE-670
- [Vyper Does Not Check the Success of Certain Precompile Calls](https://agentprime.io/advisories/GHSA-vgf2-gvx8-xwc3.md)
  `GHSA-vgf2-gvx8-xwc3`, `CVE-2025-21607`, `PYSEC-2025-33` · PyPI `vyper`: affected `*`, no fixed version yet · CVSS 2.3 Low · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-670, CWE-703
- [HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy](https://agentprime.io/advisories/CVE-2024-53271.md)
  `CVE-2024-53271` · CVE record: envoyproxy envoy · CVSS 7.1 High · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-670
- [HTTP/1: sending overload crashes when the request is reset beforehand in envoy](https://agentprime.io/advisories/CVE-2024-53270.md)
  `CVE-2024-53270` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-670
- [Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoy](https://agentprime.io/advisories/CVE-2024-53269.md)
  `CVE-2024-53269` · CVE record: envoyproxy envoy · CVSS 4.5 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-670
- [pmdomain: imx93-blk-ctrl: correct remove path](https://agentprime.io/advisories/CVE-2024-53134.md)
  `CVE-2024-53134` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-670
- [Acks not validated before logged to qlog leads to buffer overflow in ngtcp2](https://agentprime.io/advisories/CVE-2024-52811.md)
  `CVE-2024-52811` · CVE record: ngtcp2 ngtcp2 · CVSS 8.2 High · Not analysed yet · Published 25 Nov 2024 · Tags: CWE-670
- [HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability](https://agentprime.io/advisories/CVE-2024-30133.md)
  `CVE-2024-30133` · CVE record: HCL Software HCL Traveler for Microsoft Outlook (HTMO) · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-670
- [H2O ignores headers configuration directives](https://agentprime.io/advisories/CVE-2024-25622.md)
  `CVE-2024-25622` · CVE record: h2o h2o · CVSS 3.1 Low · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-670
- [In Gradio, the \`enable_monitoring\` flag set to \`False\` does not disable monitoring](https://agentprime.io/advisories/GHSA-hm3c-93pg-4cxw.md)
  `GHSA-hm3c-93pg-4cxw`, `CVE-2024-47168`, `PYSEC-2024-198` · PyPI `gradio`: affected `<4.44.0`, fixed in `4.44.0` · CVSS 2.3 Low · Not analysed yet · Published 10 Oct 2024 · Tags: CWE-670
- [btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality](https://agentprime.io/advisories/GHSA-27vh-h6mc-q6g8.md)
  `GHSA-27vh-h6mc-q6g8`, `CVE-2024-38365`, `GO-2024-3189` · Go `github.com/btcsuite/btcd`: affected `<0.24.2-beta.rc1`, fixed in `0.24.2-beta.rc1` · CVSS 7.4 High · Not analysed yet · Published 10 Oct 2024 · Tags: CWE-670
- [Runtime crash when combining tail calls with stack traces](https://agentprime.io/advisories/GHSA-q8hx-mm92-4wvg.md)
  `GHSA-q8hx-mm92-4wvg`, `CVE-2024-47763`, `PYSEC-2024-312`, `RUSTSEC-2024-0440` · crates.io `wasmtime`: affected `>=21.0.0, <21.0.2 || >=22.0.0, <22.0.1 || >=23.0.0, <23.0.3 || >=24.0.0, <24.0.1 || >=25.0.0, <25.0.2`, fixed in `21.0.2`, `22.0.1`, `23.0.3`, `24.0.1`, `25.0.2` · CVSS 5.5 Medium · Not analysed yet · Published 2 Oct 2024 · Tags: CWE-670
- [oghttp2 crash on OnBeginHeadersForStream in envoy](https://agentprime.io/advisories/CVE-2024-45807.md)
  `CVE-2024-45807` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 19 Sept 2024 · Tags: CWE-670
- [Disabled user can bypass lockout by requesting password reset in wiki.js](https://agentprime.io/advisories/CVE-2024-45298.md)
  `CVE-2024-45298` · CVE record: requarks wiki · CVSS 4.3 Medium · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-670
- [Denial of service in quinn-proto when using \`Endpoint::retry()\`](https://agentprime.io/advisories/GHSA-vr26-jcq5-fjj8.md)
  `GHSA-vr26-jcq5-fjj8`, `CVE-2024-45311`, `RUSTSEC-2024-0373` · crates.io `quinn-proto`: affected `>=0.11.0, <0.11.7`, fixed in `0.11.7` · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2024 · Tags: CWE-670
- [OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contracts](https://agentprime.io/advisories/CVE-2024-45304.md)
  `CVE-2024-45304` · CVE record: OpenZeppelin cairo-contracts · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: CWE-670
- [Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers](https://agentprime.io/advisories/CVE-2024-5659.md)
  `CVE-2024-5659` · CVE record: Rockwell Automation ControlLogix® 5580 and 4 more · CVSS 8.3 High · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-670
- [Keycloak's improper input validation allows using email as username](https://agentprime.io/advisories/GHSA-4vc8-pg5c-vg4x.md)
  `GHSA-4vc8-pg5c-vg4x`, `CVE-2021-3754` · Maven `org.keycloak:keycloak-services`: affected `<24.0.1`, fixed in `24.0.1` · CVSS 3.7 Low · Not analysed yet · Published 12 Jun 2024 · Tags: CWE-20, CWE-670
- [Contract balance not updating correctly after interchain transaction](https://agentprime.io/advisories/GHSA-xgr7-jgq3-mhmc.md)
  `GHSA-xgr7-jgq3-mhmc`, `CVE-2024-37153`, `GO-2024-2903` · Go `github.com/evmos/evmos/v10` and 12 more: affected `<18.1.0`, fixed in `18.1.0` · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-670
- [Requests \`Session\` object does not verify requests after making first request with verify=False](https://agentprime.io/advisories/GHSA-9wx4-h78v-vm56.md)
  `GHSA-9wx4-h78v-vm56`, `CVE-2024-35195`, `PYSEC-2026-1873` · PyPI `requests`: affected `<2.32.0`, fixed in `2.32.0` · CVSS 5.6 Medium · Not analysed yet · Published 20 May 2024 · Tags: CWE-670
- [Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests](https://agentprime.io/advisories/CVE-2024-35190.md)
  `CVE-2024-35190` · CVE record: asterisk asterisk · CVSS 5.8 Medium · Not analysed yet · Published 17 May 2024 · Tags: Authentication bypass, CWE-480, CWE-670
- [eZ Platform Rules to disable executable access are ignored on Platform.sh (eZ Cloud)](https://agentprime.io/advisories/GHSA-6xch-2vxx-5pvr.md)
  `GHSA-6xch-2vxx-5pvr`, `PKSA-19g4-dw1s-118z` · Packagist `ezsystems/ezplatform`: affected `>=1.7.0, <1.7.9.1 || >=1.13.0, <1.13.5.1 || >=2.5.0, <2.5.4`, fixed in `1.7.9.1`, `1.13.5.1`, `2.5.4` · No CVSS score · Not analysed yet · Published 15 May 2024 · Tags: CWE-670
- [Tor path lengths too short when "Vanguards lite" configured](https://agentprime.io/advisories/GHSA-9328-gcfq-p269.md)
  `GHSA-9328-gcfq-p269`, `CVE-2024-35312`, `CVE-2024-35313`, `GHSA-c96h-cxx6-rmg9`, `RUSTSEC-2024-0339`, `RUSTSEC-2024-0340`, `TROVE-2024-003`, `TROVE-2024-004` · crates.io `tor-circmgr`: affected `>=0.18.0, <0.18.1`, fixed in `0.18.1` · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2024 · Tags: CWE-130, CWE-670
- [Apollo Router vulnerable to Critical Regression In Query Plan Cache](https://agentprime.io/advisories/GHSA-q9p4-hw9m-fj2v.md)
  `GHSA-q9p4-hw9m-fj2v`, `CVE-2024-32971` · crates.io `apollo-router`: affected `>=1.44.0, <1.45.1`, fixed in `1.45.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 May 2024 · Tags: CWE-440, CWE-670
- [An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file.](https://agentprime.io/advisories/CVE-2024-33431.md)
  `CVE-2024-33431` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 1 May 2024 · Tags: CWE-670
- [Tuleap deleting or moving an artifact can delete values from unrelated artifacts](https://agentprime.io/advisories/CVE-2024-30246.md)
  `CVE-2024-30246` · CVE record: Enalean tuleap · CVSS 7.6 High · Not analysed yet · Published 29 Mar 2024 · Tags: CWE-440, CWE-670
- [A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization.](https://agentprime.io/advisories/CVE-2024-0313.md)
  `CVE-2024-0313` · CVE record: Skyhigh Skyhigh Client Proxy · CVSS 5.5 Medium · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-670
- [OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4](https://agentprime.io/advisories/GHSA-699g-q6qh-q4v8.md)
  `GHSA-699g-q6qh-q4v8`, `CVE-2023-49798` · npm `@openzeppelin/contracts` and 1 more: affected `>=4.9.4, <4.9.5`, fixed in `4.9.5` · CVSS 5.9 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-670
- [Fiber unauthorized access vulnerability in \`ctx.IsFromLocal()\`](https://agentprime.io/advisories/GHSA-3q5p-3558-364f.md)
  `GHSA-3q5p-3558-364f`, `CVE-2023-41338`, `GO-2023-2052` · Go `github.com/gofiber/fiber` and 1 more: affected `<=1.14.6`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2023 · Tags: CWE-670
- [Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled](https://agentprime.io/advisories/GHSA-gxh7-wv9q-fwfr.md)
  `GHSA-gxh7-wv9q-fwfr`, `CVE-2023-23623` · npm `electron`: affected `>=22.0.0-beta.1, <22.0.1 || >=23.0.0-alpha.1, <23.0.0-alpha.2`, fixed in `22.0.1`, `23.0.0-alpha.2` · CVSS 7.5 High · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-670
- [Trigger \`beforeFind\` not invoked in internal query pipeline when fetching pointer](https://agentprime.io/advisories/GHSA-fcv6-fg5r-jm9q.md)
  `GHSA-fcv6-fg5r-jm9q`, `BIT-parse-2023-41058`, `CVE-2023-41058` · npm `parse-server`: affected `>=1.0.0, <5.5.5 || >=6.0.0, <6.2.2`, fixed in `5.5.5`, `6.2.2` · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2023 · Tags: CWE-670
- [incorrect order of evaluation of side effects for some builtins](https://agentprime.io/advisories/GHSA-4hg4-9mf5-wxxq.md)
  `GHSA-4hg4-9mf5-wxxq`, `CVE-2023-41052`, `PYSEC-2023-168` · PyPI `vyper`: affected `<0.3.10`, fixed in `0.3.10` · CVSS 3.7 Low · Not analysed yet · Published 4 Sept 2023 · Tags: CWE-670
- [Vyper: reversed order of side effects for some operations](https://agentprime.io/advisories/GHSA-g2xh-c426-v8mf.md)
  `GHSA-g2xh-c426-v8mf`, `CVE-2023-40015`, `PYSEC-2023-167` · PyPI `vyper`: affected `<=0.4.2`, no fixed version yet · CVSS 3.7 Low · Not analysed yet · Published 4 Sept 2023 · Tags: CWE-670
- [Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes.](https://agentprime.io/advisories/CVE-2023-41376.md)
  `CVE-2023-41376` · CVE record · No CVSS score · Not analysed yet · Published 29 Aug 2023 · Tags: CWE-670
- [Incorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log](https://agentprime.io/advisories/GHSA-pvjf-4hfg-wr84.md)
  `GHSA-pvjf-4hfg-wr84`, `CVE-2023-39152` · Maven `org.jenkins-ci.plugins:gradle`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 6.5 Medium · Not analysed yet · Published 26 Jul 2023 · Tags: CWE-670
- [Vyper's nonpayable default functions are sometimes payable](https://agentprime.io/advisories/GHSA-vxmm-cwh2-q762.md)
  `GHSA-vxmm-cwh2-q762`, `CVE-2023-32675`, `PYSEC-2023-80` · PyPI `vyper`: affected `<0.3.8`, fixed in `0.3.8` · CVSS 3.7 Low · Not analysed yet · Published 22 May 2023 · Tags: CWE-670
- [Incorrect success value returned in vyper](https://agentprime.io/advisories/GHSA-w9g2-3w7p-72g9.md)
  `GHSA-w9g2-3w7p-72g9`, `CVE-2023-30629`, `PYSEC-2023-131` · PyPI `vyper`: affected `>=0.3.1, <0.3.8`, fixed in `0.3.8` · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2023 · Tags: CWE-670
- [An issue was discovered in ONOS 2.5.1.](https://agentprime.io/advisories/CVE-2022-29609.md)
  `CVE-2022-29609` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-670
- [An issue was discovered in ONOS 2.5.1.](https://agentprime.io/advisories/CVE-2022-29607.md)
  `CVE-2022-29607` · CVE record · CVSS 7.5 High · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-670
- [An issue was discovered in ONOS 2.5.1.](https://agentprime.io/advisories/CVE-2022-29605.md)
  `CVE-2022-29605` · CVE record · CVSS 7.5 High · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-670
- [Stargate-Bukkit improperly handles vehicles causing data duplication.](https://agentprime.io/advisories/CVE-2021-43819.md)
  `CVE-2021-43819` · CVE record: stargate-bukkit Stargate-Bukkit · CVSS 7.5 High · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-670
- [A flaw was found in openvswitch (OVS).](https://agentprime.io/advisories/CVE-2023-1668.md)
  `CVE-2023-1668` · CVE record: openvswitch · CVSS 8.2 High · Not analysed yet · Published 10 Apr 2023 · Tags: CWE-670
- [Always Incorrect Control Flow Implementation in MODEM](https://agentprime.io/advisories/CVE-2022-25745.md)
  `CVE-2022-25745` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-670
- [Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.](https://agentprime.io/advisories/CVE-2023-20558.md)
  `CVE-2023-20558` · CVE record: AMD Ryzen™ 2000 Series and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-670
- [The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0.](https://agentprime.io/advisories/CVE-2023-0400.md)
  `CVE-2023-0400` · CVE record: Trellix Data Loss Prevention (DLP) · CVSS 5.9 Medium · Not analysed yet · Published 1 Feb 2023 · Tags: CWE-670
- [Android: In onPackageRemoved of AccessibilityManagerService.java…](https://agentprime.io/advisories/CVE-2023-20921.md)
  `CVE-2023-20921` · CVE record: Android · CVSS 7.3 High · Not analysed yet · Published 24 Jan 2023 · Tags: CWE-670
- [Android: In addOrReplacePhoneAccount of PhoneAccountRegistrar.java…](https://agentprime.io/advisories/CVE-2023-20915.md)
  `CVE-2023-20915` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 24 Jan 2023 · Tags: CWE-670
- [bt: host: Wrong key validation check](https://agentprime.io/advisories/CVE-2022-2993.md)
  `CVE-2022-2993` · CVE record: zephyrproject-rtos zephyr · CVSS 8.6 High · Not analysed yet · Published 12 Dec 2022 · Tags: CWE-670
- [Seg fault in \`ndarray_tensor_bridge\` due to zero and large inputs](https://agentprime.io/advisories/GHSA-jq6x-99hj-q636.md)
  `GHSA-jq6x-99hj-q636`, `BIT-tensorflow-2022-41884`, `CVE-2022-41884`, `PYSEC-2026-1013`, `PYSEC-2026-3208`, `PYSEC-2026-3345` · PyPI `tensorflow` and 2 more: affected `<2.8.4 || >=2.9.0, <2.9.3 || >=2.10.0, <2.10.1`, fixed in `2.8.4`, `2.9.3`, `2.10.1` · CVSS 4.8 Medium · Not analysed yet · Published 21 Nov 2022 · Tags: CWE-670
- [Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name.](https://agentprime.io/advisories/CVE-2022-45196.md)
  `CVE-2022-45196` · CVE record · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2022 · Tags: CWE-670
- [Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)](https://agentprime.io/advisories/GHSA-hhc4-47rh-cr34.md)
  `GHSA-hhc4-47rh-cr34`, `CVE-2022-39354`, `RUSTSEC-2022-0083` · crates.io `evm`: affected `<0.36.0`, fixed in `0.36.0` · CVSS 5.9 Medium · Not analysed yet · Published 25 Oct 2022 · Tags: CWE-670
- [In vow, there is a possible undefined behavior due to an API misuse.](https://agentprime.io/advisories/CVE-2022-26461.md)
  `CVE-2022-26461` · CVE record: MediaTek, Inc. MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 6 Sept 2022 · Tags: CWE-670
- [Solana Pay Vulnerable to Weakness in Transfer Validation Logic](https://agentprime.io/advisories/GHSA-j47c-j42c-mwqq.md)
  `GHSA-j47c-j42c-mwqq`, `CVE-2022-35917` · npm `@solana/pay`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2022 · Tags: CWE-670
- [Discrepency in transfer value and actual value due to incorrect truncation in Frontier](https://agentprime.io/advisories/CVE-2022-31111.md)
  `CVE-2022-31111` · CVE record: paritytech frontier · CVSS 5.3 Medium · Not analysed yet · Published 6 Jul 2022 · Tags: CWE-670
- [Incorrect handling of invalid surrogate pair characters](https://agentprime.io/advisories/GHSA-wpqr-jcpx-745r.md)
  `GHSA-wpqr-jcpx-745r`, `CVE-2022-31116`, `PYSEC-2026-1057` · PyPI `ujson`: affected `<5.4.0`, fixed in `5.4.0` · CVSS 7.5 High · Not analysed yet · Published 5 Jul 2022 · Tags: CWE-670
- [Expression Always True vulnerability in Zulip Server](https://agentprime.io/advisories/CVE-2022-31017.md)
  `CVE-2022-31017` · CVE record: zulip zulip · CVSS 2.0 Low · Not analysed yet · Published 25 Jun 2022 · Tags: CWE-571, CWE-670
- [Multiple evaluation of contract address in call in vyper](https://agentprime.io/advisories/GHSA-4v9q-cgpw-cf38.md)
  `GHSA-4v9q-cgpw-cf38`, `CVE-2022-29255`, `PYSEC-2022-43053` · PyPI `vyper`: affected `<0.3.4`, fixed in `0.3.4` · CVSS 8.2 High · Not analysed yet · Published 6 Jun 2022 · Tags: CWE-670
- [bson-objectid contains Improper input validation](https://agentprime.io/advisories/GHSA-p84x-5xx8-hff9.md)
  `GHSA-p84x-5xx8-hff9`, `CVE-2019-19729` · npm `bson-objectid`: affected `<=1.3.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 24 May 2022 · Tags: CWE-20, CWE-670
- [Always-Incorrect Control Flow Implementation in Facebook Hermes](https://agentprime.io/advisories/GHSA-327c-qx3v-h673.md)
  `GHSA-327c-qx3v-h673`, `CVE-2020-1914` · npm `hermes-engine`: affected `<0.7.2`, fixed in `0.7.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: CWE-670, CWE-1119
- [F5 BIG-IP Advanced WAF, ASM, and APM: On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1…](https://agentprime.io/advisories/CVE-2022-26890.md)
  `CVE-2022-26890` · CVE record: F5 BIG-IP Advanced WAF, ASM, and APM · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-670

Newest: <https://agentprime.io/advisories/tag/cwe-670.md>
Older: <https://agentprime.io/advisories/tag/cwe-670.md?cursor=WyIyMDIyLTA1LTA1VDE2OjA2OjI4LjYyNjAwMFoiLCJDVkUtMjAyMi0yNjg5MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-670&cursor=WyIyMDI1LTAzLTI0VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNS0yOTMxMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-670/?cursor=WyIyMDI1LTAzLTI0VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNS0yOTMxMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.
