# CWE-697. Every Advisory and CVE whose sources give the weakness CWE-697, newest first. ## Records, newest first (an older page) - [HuangDou UTCMS Login login.php comparison](https://agentprime.io/advisories/CVE-2025-9401.md) `CVE-2025-9401` · CVE record: HuangDou UTCMS · CVSS 6.3 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: CWE-697 - [In Plesk Obsidian 18.0.70, \_isAdminPasswordValid uses an == comparison.](https://agentprime.io/advisories/CVE-2025-54336.md) `CVE-2025-54336` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-697 - [NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP](https://agentprime.io/advisories/CVE-2025-48952.md) `CVE-2025-48952` · CVE record: jokob-sk NetAlertX · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-697 - [SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation](https://agentprime.io/advisories/CVE-2025-3102.md) `CVE-2025-3102` · CVE record: brainstormforce OttoKit: All-in-One Automation Platform · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.76 · Not analysed yet · Published 10 Apr 2025 · Tags: CWE-697 - [TCPDF has incorrect comparison](https://agentprime.io/advisories/GHSA-w95c-7994-ghpr.md) `GHSA-w95c-7994-ghpr`, `CVE-2024-56522`, `PKSA-wb9y-hg45-chz4` · Packagist `tecnickcom/tcpdf`: affected `<6.8.0`, fixed in `6.8.0` · CVSS 7.5 High · Not analysed yet · Published 27 Dec 2024 · Tags: Memory corruption, CWE-697 - [\`idna\` accepts Punycode labels that do not produce any non-ASCII when decoded](https://agentprime.io/advisories/GHSA-h97m-ww89-6jmq.md) `GHSA-h97m-ww89-6jmq`, `CVE-2024-12224`, `RUSTSEC-2024-0421` · crates.io `idna`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 5.1 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: CWE-697, CWE-1289 - [PyJWT Issuer field partial matches allowed](https://agentprime.io/advisories/GHSA-75c5-xw7c-p5pm.md) `GHSA-75c5-xw7c-p5pm`, `CVE-2024-53861`, `PYSEC-2026-1814` · PyPI `pyjwt`: affected `>=2.10.0, <2.10.1`, fixed in `2.10.1` · CVSS 2.2 Low · Not analysed yet · Published 2 Dec 2024 · Tags: CWE-697 - [Junos OS Evolved: Connections to the network and broadcast address accepted](https://agentprime.io/advisories/CVE-2024-39534.md) `CVE-2024-39534` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-697 - [Owncast Cross-Site Request Forgery vulnerability in github.com/owncast/owncast](https://agentprime.io/advisories/GHSA-v99w-r56h-g23v.md) `GHSA-v99w-r56h-g23v`, `CVE-2024-29026`, `GO-2024-3054` · Go `github.com/owncast/owncast`: affected `<0.1.3`, fixed in `0.1.3` · CVSS 8.2 High · Not analysed yet · Published 6 Aug 2024 · Tags: Cross-site request forgery (CSRF), CWE-697 - [Alpine allows Authentication Filter bypass](https://agentprime.io/advisories/GHSA-whr2-9x5f-5c79.md) `GHSA-whr2-9x5f-5c79`, `CVE-2022-23554` · Maven `us.springett:alpine`: affected `<1.10.4`, fixed in `1.10.4` · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2024 · Tags: Authentication bypass, CWE-697 - [Two-Factor Authentication (2FA) Bypass in mailcow: dockerized](https://agentprime.io/advisories/CVE-2024-41958.md) `CVE-2024-41958` · CVE record: mailcow mailcow-dockerized · CVSS 6.6 Medium · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-697 - [Softaculous Webuzo Authentication Bypass](https://agentprime.io/advisories/CVE-2024-24621.md) `CVE-2024-24621` · CVE record: Softaculous Webuzo · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jul 2024 · Tags: CWE-697 - [Incorrect IPv4 and IPv6 private ranges](https://agentprime.io/advisories/CVE-2024-4032.md) `CVE-2024-4032` · CVE record: Python Software Foundation CPython · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2024 · Tags: CWE-697 - [Authentication Bypass when using using older password hashes](https://agentprime.io/advisories/CVE-2024-34340.md) `CVE-2024-34340` · CVE record: Cacti cacti · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2024 · Tags: Authentication bypass, CWE-697 - [KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols](https://agentprime.io/advisories/GHSA-3wc5-fcw2-2329.md) `GHSA-3wc5-fcw2-2329`, `CVE-2024-28246` · npm `katex`: affected `>=0.11.0, <0.16.10`, fixed in `0.16.10` · CVSS 5.5 Medium · Not analysed yet · Published 25 Mar 2024 · Tags: CWE-184, CWE-697 - [planet-freo auth.inc.php comparison](https://agentprime.io/advisories/CVE-2015-10129.md) `CVE-2015-10129` · CVE record: planet-freo · CVSS 3.7 Low · Not analysed yet · Published 4 Feb 2024 · Tags: CWE-697 - [Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin](https://agentprime.io/advisories/GHSA-f67f-2j6r-m4c9.md) `GHSA-f67f-2j6r-m4c9`, `CVE-2024-23903` · Maven `io.jenkins.plugins:gitlab-branch-source`: affected `<688.v5fa`, fixed in `688.v5fa` · CVSS 3.7 Low · Not analysed yet · Published 24 Jan 2024 · Tags: CWE-697 - [Jenkins Gogs Plugin uses non-constant time webhook token comparison](https://agentprime.io/advisories/GHSA-885r-hhpr-cc9p.md) `GHSA-885r-hhpr-cc9p`, `CVE-2023-46657` · Maven `org.jenkins-ci.plugins:gogs-webhook`: affected `<=1.0.15`, no fixed version yet · CVSS 3.7 Low · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-208, CWE-697 - [Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison](https://agentprime.io/advisories/GHSA-8859-v9jp-cphf.md) `GHSA-8859-v9jp-cphf`, `CVE-2023-46656` · Maven `igalg.jenkins.plugins:multibranch-scan-webhook-trigger`: affected `<=1.0.9`, no fixed version yet · CVSS 3.7 Low · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-208, CWE-697 - [Non-constant time webhook token hash comparison in Jenkins Zanata Plugin](https://agentprime.io/advisories/GHSA-86j9-25m2-9w97.md) `GHSA-86j9-25m2-9w97`, `CVE-2023-46660` · Maven `org.jenkins-ci.plugins:zanata`: affected `<=0.6`, no fixed version yet · CVSS 3.7 Low · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-208, CWE-697 - [Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison](https://agentprime.io/advisories/GHSA-2xpq-5952-38w3.md) `GHSA-2xpq-5952-38w3`, `CVE-2023-46658` · Maven `io.jenkins.plugins:teams-webhook-trigger`: affected `<=0.1.1`, no fixed version yet · CVSS 3.7 Low · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-208, CWE-697 - [Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code](https://agentprime.io/advisories/GHSA-67hx-6x53-jw92.md) `GHSA-67hx-6x53-jw92`, `CVE-2023-45133` · npm `@babel/traverse` and 1 more: affected `<7.23.2 || >=8.0.0-alpha.0, <8.0.0-alpha.4`, fixed in `7.23.2`, `8.0.0-alpha.4` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2023 · Tags: CWE-184, CWE-697 - [gnark unsoundness in variable comparison / non-unique binary decomposition](https://agentprime.io/advisories/GHSA-498w-5j49-vqjg.md) `GHSA-498w-5j49-vqjg`, `CVE-2023-44378`, `GO-2023-2098` · Go `github.com/consensys/gnark`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 7.1 High · Not analysed yet · Published 4 Oct 2023 · Tags: Memory corruption, CWE-697 - [MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers.](https://agentprime.io/advisories/CVE-2015-6964.md) `CVE-2015-6964` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-697 - [Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling](https://agentprime.io/advisories/CVE-2023-23766.md) `CVE-2023-23766` · CVE record: GitHub Enterprise Server · CVSS 4.5 Medium · Not analysed yet · Published 22 Sept 2023 · Tags: CWE-697 - [SolarWinds Platform Exposed Dangerous Method Vulnerability](https://agentprime.io/advisories/CVE-2023-23845.md) `CVE-2023-23845` · CVE record: SolarWinds SolarWinds Platform · CVSS 6.8 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-697 - [SolarWinds Platform Exposed Dangerous Method Vulnerability](https://agentprime.io/advisories/CVE-2023-23840.md) `CVE-2023-23840` · CVE record: SolarWinds SolarWinds Platform · CVSS 6.8 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-697 - [Non-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin](https://agentprime.io/advisories/GHSA-hj7p-h74j-6gxj.md) `GHSA-hj7p-h74j-6gxj`, `CVE-2023-41935` · Maven `org.jenkins-ci.plugins:azure-ad`: affected `>=378.380.v545b, <397.v907382dd9b || <378.vd6e2874a`, fixed in `397.v907382dd9b`, `378.vd6e2874a` · CVSS 7.5 High · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-697 - [Jenkins Google Login Plugin non-constant time token comparison](https://agentprime.io/advisories/GHSA-g58x-57fv-86jh.md) `GHSA-g58x-57fv-86jh`, `CVE-2023-41936` · Maven `org.jenkins-ci.plugins:google-login`: affected `<1.8`, fixed in `1.8` · CVSS 7.5 High · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-697 - [Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling](https://agentprime.io/advisories/CVE-2023-23765.md) `CVE-2023-23765` · CVE record: GitHub Enterprise Server · CVSS 4.8 Medium · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-697 - [Apache NiFi Insufficient Property Validation vulnerability](https://agentprime.io/advisories/GHSA-23qf-3jf9-h3q9.md) `GHSA-23qf-3jf9-h3q9`, `BIT-nifi-2023-40037`, `CVE-2023-40037` · Maven `org.apache.nifi:nifi-dbcp-base` and 3 more: affected `>=1.21.0, <1.23.1`, fixed in `1.23.1` · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2023 · Tags: CWE-184, CWE-697 - [Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling](https://agentprime.io/advisories/CVE-2023-23764.md) `CVE-2023-23764` · CVE record: GitHub Enterprise Server · CVSS 4.8 Medium · Not analysed yet · Published 27 Jul 2023 · Tags: CWE-697 - [SolarWinds Platform Incorrect Comparison Vulnerability](https://agentprime.io/advisories/CVE-2023-23843.md) `CVE-2023-23843` · CVE record: SolarWinds SolarWinds Platform · CVSS 7.2 High · Not analysed yet · Published 26 Jul 2023 · Tags: CWE-697 - [SolarWinds Platform Deserialization of Untrusted Data Vulnerability](https://agentprime.io/advisories/CVE-2023-33225.md) `CVE-2023-33225` · CVE record: SolarWinds SolarWinds Platform · CVSS 7.2 High · Not analysed yet · Published 26 Jul 2023 · Tags: CWE-697 - [Server bad parsing implementation - stack overflow in server::get_db_path_for_driver](https://agentprime.io/advisories/CVE-2023-22435.md) `CVE-2023-22435` · CVE record: Honeywell Experion Server and 3 more · CVSS 7.5 High · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-697 - [Sentry CORS misconfiguration](https://agentprime.io/advisories/GHSA-4xqm-4p72-87h6.md) `GHSA-4xqm-4p72-87h6`, `CVE-2023-36829`, `PYSEC-2023-115` · PyPI `sentry`: affected `>=23.6.0, <23.6.2`, fixed in `23.6.2` · CVSS 6.8 Medium · Not analysed yet · Published 6 Jul 2023 · Tags: Broken access control, CWE-697, CWE-942 - [Apache OpenMeetings insufficient authorization vulnerability](https://agentprime.io/advisories/GHSA-v93h-rwj8-78qh.md) `GHSA-v93h-rwj8-78qh`, `CVE-2023-28936` · Maven `org.apache.openmeetings:openmeetings-db`: affected `>=2.0.0, <7.1.0`, fixed in `7.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-697 - [Dynamic Linq vulnerable to remote code execution](https://agentprime.io/advisories/GHSA-w65q-jcmv-28gj.md) `GHSA-w65q-jcmv-28gj`, `CVE-2023-32571` · NuGet `System.Linq.Dynamic.Core`: affected `>=1.0.7.10, <1.3.0`, fixed in `1.3.0` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.35 · Not analysed yet · Published 22 Jun 2023 · Tags: CWE-697 - [An issue was discovered in ONOS 2.5.1.](https://agentprime.io/advisories/CVE-2022-29944.md) `CVE-2022-29944` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-697 - [An issue was discovered in ONOS 2.5.1.](https://agentprime.io/advisories/CVE-2021-38364.md) `CVE-2021-38364` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-697 - [Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling](https://agentprime.io/advisories/CVE-2023-23762.md) `CVE-2023-23762` · CVE record: GitHub Enterprise Server · CVSS 6.5 Medium · Not analysed yet · Published 7 Apr 2023 · Tags: CWE-697 - [Incorrect comparison in D-Link DIR-1935](https://agentprime.io/advisories/CVE-2022-43621.md) `CVE-2022-43621` · CVE record: D-Link DIR-1935 · CVSS 8.8 High · Not analysed yet · Published 29 Mar 2023 · Tags: CWE-697 - [TensorFlow has Floating Point Exception in AudioSpectrogram](https://agentprime.io/advisories/GHSA-f637-vh3r-vfh2.md) `GHSA-f637-vh3r-vfh2`, `BIT-tensorflow-2023-25666`, `CVE-2023-25666`, `PYSEC-2026-1960`, `PYSEC-2026-3169`, `PYSEC-2026-3317` · PyPI `tensorflow` and 2 more: affected `<2.11.1`, fixed in `2.11.1` · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-697 - [TensorFlow has Floating Point Exception in AvgPoolGrad with XLA](https://agentprime.io/advisories/GHSA-rcf8-g8jv-vg6p.md) `GHSA-rcf8-g8jv-vg6p`, `BIT-tensorflow-2023-25669`, `CVE-2023-25669`, `PYSEC-2026-1964`, `PYSEC-2026-3236`, `PYSEC-2026-3366` · PyPI `tensorflow` and 2 more: affected `<2.11.1`, fixed in `2.11.1` · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-697 - [TensorFlow has Floating Point Exception in TensorListSplit with XLA](https://agentprime.io/advisories/GHSA-647v-r7qq-24fh.md) `GHSA-647v-r7qq-24fh`, `BIT-tensorflow-2023-25673`, `CVE-2023-25673`, `PYSEC-2026-3115`, `PYSEC-2026-3281`, `PYSEC-2026-956` · PyPI `tensorflow` and 2 more: affected `<2.11.1`, fixed in `2.11.1` · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-697 - [TensorFlow has Segfault in Bincount with XLA](https://agentprime.io/advisories/GHSA-7x4v-9gxg-9hwj.md) `GHSA-7x4v-9gxg-9hwj`, `BIT-tensorflow-2023-25675`, `CVE-2023-25675`, `PYSEC-2026-3131`, `PYSEC-2026-3294`, `PYSEC-2026-967` · PyPI `tensorflow` and 2 more: affected `<2.11.1`, fixed in `2.11.1` · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-697 - [TensorFlow has Floating Point Exception in TFLite in conv kernel](https://agentprime.io/advisories/GHSA-5w96-866f-6rm8.md) `GHSA-5w96-866f-6rm8`, `BIT-tensorflow-2023-27579`, `CVE-2023-27579`, `PYSEC-2026-3111`, `PYSEC-2026-3279`, `PYSEC-2026-954` · PyPI `tensorflow` and 2 more: affected `<2.11.1`, fixed in `2.11.1` · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-697 - [A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.](https://agentprime.io/advisories/CVE-2022-47034.md) `CVE-2022-47034` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Feb 2023 · Tags: CWE-697 - [mrobit robitailletheknot CSRF Token filters.php comparison](https://agentprime.io/advisories/CVE-2014-125057.md) `CVE-2014-125057` · CVE record: mrobit robitailletheknot · CVSS 3.1 Low · Not analysed yet · Published 7 Jan 2023 · Tags: CWE-697 - [An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6.](https://agentprime.io/advisories/CVE-2022-41317.md) `CVE-2022-41317` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 25 Dec 2022 · Tags: CWE-697 - [SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow()](https://agentprime.io/advisories/CVE-2022-35091.md) `CVE-2022-35091` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 23 Sept 2022 · Tags: CWE-697 - [uri-template-lite Regular Expression Denial of Service](https://agentprime.io/advisories/GHSA-chw2-6c7r-37p7.md) `GHSA-chw2-6c7r-37p7`, `CVE-2021-43309` · npm `uri-template-lite`: affected `<22.9.0`, fixed in `22.9.0` · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2022 · Tags: Denial of service, CWE-697 - [Regular expression denial of service in eth-account](https://agentprime.io/advisories/GHSA-v65g-f3cj-fjp4.md) `GHSA-v65g-f3cj-fjp4`, `CVE-2022-1930`, `PYSEC-2026-806` · PyPI `eth-account`: affected `<0.5.9`, fixed in `0.5.9` · CVSS 5.9 Medium · Not analysed yet · Published 23 Aug 2022 · Tags: Denial of service, CWE-697 - [JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack](https://agentprime.io/advisories/GHSA-v866-gwf5-w92f.md) `GHSA-v866-gwf5-w92f`, `CVE-2022-38179` · Maven `io.ktor:ktor`: affected `<2.1.0`, fixed in `2.1.0` · CVSS 4.7 Medium · Not analysed yet · Published 13 Aug 2022 · Tags: CWE-184, CWE-697 - [Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot](https://agentprime.io/advisories/CVE-2022-22203.md) `CVE-2022-22203` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-697 - [Codiad Vulnerable to PHP Magic Hash Vulnerability](https://agentprime.io/advisories/GHSA-8fhh-hf9w-55p7.md) `GHSA-8fhh-hf9w-55p7`, `CVE-2020-23355`, `PKSA-bkc4-6y26-g8xz` · Packagist `codiad/codiad`: affected `<=2.8.4`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 24 May 2022 · Tags: Authentication bypass, CWE-697 - [Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header](https://agentprime.io/advisories/GHSA-wxvr-qqm7-6h65.md) `GHSA-wxvr-qqm7-6h65`, `CVE-2020-13485`, `PKSA-m63z-24sm-jgzh` · Packagist `verbb/knock-knock`: affected `<1.2.8`, fixed in `1.2.8` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: CWE-697 - [Incorrect Comparison in Vyper](https://agentprime.io/advisories/GHSA-7vrm-3jc8-5wwm.md) `GHSA-7vrm-3jc8-5wwm`, `CVE-2022-24787`, `PYSEC-2022-196` · PyPI `vyper`: affected `<0.3.2`, fixed in `0.3.2` · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2022 · Tags: CWE-697 - [Incorrect comparison in BIG-IP](https://agentprime.io/advisories/CVE-2022-23027.md) `CVE-2022-23027` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: CWE-697 - [Incorrect Comparison in cvxopt](https://agentprime.io/advisories/GHSA-8rh6-h94m-vj54.md) `GHSA-8rh6-h94m-vj54`, `CVE-2021-41500`, `PYSEC-2021-870` · PyPI `cvxopt`: affected `<1.2.7`, fixed in `1.2.7` · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2022 · Tags: CWE-697 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .