agentprime: CWE-670

CVE-2026-117859: Keycloak-services: keycloak-services: par single-use bypass via flow restart

Thu, 29 Oct 2026 06:22:11 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Authlib: empty signatures validation in JWS JSON deserialization

Tue, 27 Oct 2026 14:50:18 GMT

authlib <1.9.0, fixed in 1.9.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround

Tue, 13 Oct 2026 15:44:08 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component

Tue, 13 Oct 2026 12:29:19 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107284: AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check

Wed, 07 Oct 2026 21:27:03 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106586: OpenBSD OpenSSH: In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to…

Tue, 06 Oct 2026 20:57:09 GMT

CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Vyper: Return inside for loop more than 1 level deep

Tue, 06 Oct 2026 15:20:10 GMT

vyper >=0.1.0b10, <0.2.3, fixed in 0.2.3. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-102110: Missing authentication on a Kiteworks appliance setup function

Wed, 30 Sep 2026 20:21:42 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102124: Kiteworks Core Missing Authentication for Critical Function

Wed, 30 Sep 2026 20:15:38 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92932: MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled

Thu, 17 Sep 2026 12:33:44 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73468: Security Advisory 0175

Wed, 16 Sep 2026 09:55:17 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55624: MintyItanium Lost-Auction takes items like barrier blocks out from search GUI

Tue, 25 Aug 2026 14:56:11 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72705: Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argument

Mon, 24 Aug 2026 20:08:32 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72704: Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport

Mon, 24 Aug 2026 20:08:31 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72703: Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls

Mon, 24 Aug 2026 20:08:30 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

Thu, 13 Aug 2026 15:51:04 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73283: OpenBSD OpenSSH: In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to…

Tue, 11 Aug 2026 19:15:24 GMT

CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20713: Intel(R) Xeon(R) processors may allow an escalation of…: Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R)…

Tue, 11 Aug 2026 16:25:23 GMT

CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16392: JIT miscompilation in the JavaScript Engine: JIT component

Tue, 21 Jul 2026 12:38:05 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14935: Gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check

Tue, 07 Jul 2026 15:37:58 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

cut: -s (only-delimited) ignored when delimiter is a newline

Mon, 06 Jul 2026 19:54:33 GMT

uu_cut <0.7.0, fixed in 0.7.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-56328: Capgo - Integrity Issue in Release Routing via Multiple Public Channels

Tue, 30 Jun 2026 22:08:32 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7656: Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack

Mon, 29 Jun 2026 22:09:10 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability

Mon, 29 Jun 2026 21:32:15 GMT

org.apache.tomcat.embed:tomcat-embed-core >=11.0.0-M1, <11.0.23 || >=10.1.0-M1, <10.1.56 || >=9.0.0.M1, <9.0.119 || >=8.5.0, <=8.5.100, fixed in 11.0.23, 10.1.56, 9.0.119. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability

Mon, 29 Jun 2026 21:32:15 GMT

org.apache.tomcat.embed:tomcat-embed-core >=11.0.0-M1, <11.0.23 || >=10.1.0-M1, <10.1.56 || >=9.0.0.M1, <9.0.119 || >=8.5.0, <=8.5.100, fixed in 11.0.23, 10.1.56, 9.0.119. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-56307: Cap-go - Broken Cursor Pagination in /private/devices Endpoint

Sat, 20 Jun 2026 15:24:47 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12321: JIT miscompilation in the JavaScript: WebAssembly component

Tue, 16 Jun 2026 11:52:54 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48844: Roundcube Webmail: Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation…

Mon, 25 May 2026 19:14:48 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20171: Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability

Wed, 20 May 2026 16:06:38 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload.py in the Upload fu...

Fri, 08 May 2026 15:16:37 GMT

dash-uploader >=0.1.0, <0.7.0a1, fixed in 0.7.0a1. CVSS 7.5 (High). Published by OSV. Not analysed by agentprime yet.

CVE-2026-44928: In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

Fri, 08 May 2026 07:15:28 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction

Thu, 30 Apr 2026 18:21:04 GMT

github.com/ydb-platform/ydb-go-sdk/v3 >=3.104.6, <3.134.2, fixed in 3.134.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Thu, 23 Apr 2026 06:30:22 GMT

uuid <14.0.0, fixed in 14.0.0. CVSS 3.2 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Wed, 22 Apr 2026 20:53:24 GMT

uuid <11.1.1 || >=12.0.0, <12.0.1 || >=13.0.0, <13.0.1, fixed in 11.1.1, 12.0.1, 13.0.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: uutils coreutils has an Issue With its Always-Incorrect Control Flow Implementation

Wed, 22 Apr 2026 18:31:45 GMT

coreutils <0.7.0, fixed in 0.7.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-41527: KDE Kleopatra: KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a…

Tue, 21 Apr 2026 00:00:00 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views

Mon, 20 Apr 2026 06:31:28 GMT

fschat <=0.2.36, no fixed version yet. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40960: Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment.

Thu, 16 Apr 2026 00:54:45 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Data Sharing Framework has an Inverted Time Comparison in OIDC JWKS and Token Cache

Wed, 15 Apr 2026 19:19:50 GMT

dev.dsf:dsf-bpe-process-api-v2 *, no fixed version yet. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40719: MaraDNS: Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone…

Wed, 15 Apr 2026 06:23:09 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40396: varnish-software Varnish Cache: Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon…

Sun, 12 Apr 2026 19:23:03 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40394: varnish-software Varnish Cache: Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace…

Sun, 12 Apr 2026 19:17:34 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40200: An issue was discovered in musl libc 0.7.10 through 1.2.6.

Fri, 10 Apr 2026 00:00:00 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Host panic when Winch compiler executes `table.fill`

Thu, 09 Apr 2026 12:00:00 GMT

wasmtime >=0.0.0-0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1, fixed in 36.0.7, 42.0.2, 43.0.1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Endpoint persists after trust decline, leaking gateway credentials

Fri, 03 Apr 2026 03:26:14 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35414: OpenBSD OpenSSH: OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon…

Thu, 02 Apr 2026 17:08:15 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-35387: OpenSSH before 10.3 can use unintended ECDSA algorithms.

Thu, 02 Apr 2026 16:52:53 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-58136: Apache Traffic Server: A simple legitimate POST request causes a crash

Thu, 02 Apr 2026 15:54:47 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Nest Fastify HEAD Request Middleware Bypass

Tue, 17 Mar 2026 18:38:38 GMT

@nestjs/platform-fastify <11.1.16, fixed in 11.1.16. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-32713: PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors

Fri, 13 Mar 2026 21:20:09 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.