agentprime: CWE-704

CVE-2026-122319: Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic

Thu, 05 Nov 2026 02:25:18 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102703: arbitrary read/write via grant copy

Wed, 04 Nov 2026 10:30:00 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121589: spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion

Tue, 03 Nov 2026 23:45:22 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121262: phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion

Tue, 03 Nov 2026 17:00:16 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

Tue, 27 Oct 2026 16:10:55 GMT

qs >=6.7.0, <6.16.1, fixed in 6.16.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

beam_mcp: JSON boolean and null tool arguments reach dispatch as strings

Thu, 08 Oct 2026 13:41:05 GMT

beam_mcp >=0.1.0, <0.10.1, fixed in 0.10.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

Mon, 05 Oct 2026 23:42:50 GMT

vllm <0.30.0, fixed in 0.30.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-104420: Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks

Fri, 02 Oct 2026 11:38:01 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20249: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

Wed, 16 Sep 2026 20:11:43 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86348: MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin process

Mon, 14 Sep 2026 13:52:24 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87546: Incorrect type conversion in Google Chrome

Wed, 09 Sep 2026 00:10:03 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58822: Incorrect type conversion in Google Android

Tue, 08 Sep 2026 18:06:01 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28609: Incorrect type conversion in Google Android

Tue, 08 Sep 2026 18:04:54 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69585: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Tue, 08 Sep 2026 17:11:47 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50278: iccDEV: CIccEmbedIO::Read8() size_t underflow

Fri, 21 Aug 2026 14:57:10 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-10080: Boards plugin panics on WebSocket command with non-string field types

Mon, 17 Aug 2026 22:04:30 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15826: User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

Sat, 15 Aug 2026 06:38:09 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-53798: rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping

Thu, 13 Aug 2026 14:36:00 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18675: Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid

Wed, 12 Aug 2026 18:36:17 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6726: An information leakage vulnerability in the TCG TPM 2.0 reference code.

Tue, 11 Aug 2026 15:24:44 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

Fri, 24 Jul 2026 16:47:16 GMT

russh <0.62.4, fixed in 0.62.4. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

node-tar: Process crash via PAX numeric path type confusion

Mon, 20 Jul 2026 21:53:14 GMT

tar <7.5.18, fixed in 7.5.18. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-51678: An issue was discovered in RISC-V PicoRV32 commit 87c89a.

Fri, 17 Jul 2026 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50337: Windows Notification Elevation of Privilege Vulnerability

Tue, 14 Jul 2026 17:06:26 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking

Mon, 06 Jul 2026 20:50:35 GMT

github.com/coder/coder/v2 <2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2, fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-48140: Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream

Fri, 19 Jun 2026 13:32:18 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

unbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race

Fri, 29 May 2026 19:05:21 GMT

unbounded-spsc <=0.2.0, no fixed version yet. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-7345: Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation

Tue, 19 May 2026 21:55:51 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

Mon, 18 May 2026 20:20:03 GMT

go.opentelemetry.io/obi <0.9.0, fixed in 0.9.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

Fri, 08 May 2026 22:52:20 GMT

github.com/free5gc/udr <1.4.3, fixed in 1.4.3. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters

Wed, 06 May 2026 21:45:51 GMT

vllm >=0.18.0, <0.20.0, fixed in 0.20.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery

Mon, 04 May 2026 21:25:30 GMT

chainguard.dev/apko <1.2.7, fixed in 1.2.7. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40613: Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)

Tue, 21 Apr 2026 18:00:53 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34379: OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)

Mon, 06 Apr 2026 15:21:06 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-4456: Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact

Fri, 27 Feb 2026 00:16:36 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

Thu, 26 Feb 2026 15:20:51 GMT

psd-tools <1.12.2, fixed in 1.12.2. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-40541: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability

Tue, 24 Feb 2026 07:41:49 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40540: SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability

Tue, 24 Feb 2026 07:41:17 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-40539: SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability

Tue, 24 Feb 2026 07:40:46 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25613: An unsafe cast in the MongoDB query planner can result in a segmentation fault.

Tue, 10 Feb 2026 18:54:50 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25503: iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()

Tue, 03 Feb 2026 18:36:29 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

cert-manager-controller DoS via Specially Crafted DNS Response

Mon, 02 Feb 2026 22:11:06 GMT

github.com/cert-manager/cert-manager >=1.18.0, <1.18.5 || >=1.19.0, <1.19.3, fixed in 1.18.5, 1.19.3. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-24856: iccDEV has UB runtime error in

Wed, 28 Jan 2026 21:05:12 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-71002: A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Wed, 28 Jan 2026 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-12781: base64.b64decode() always accepts "+/" characters, despite setting altchars

Wed, 21 Jan 2026 19:34:47 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21692: iccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp

Wed, 07 Jan 2026 21:56:40 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

loggingredactor converts non-string types to string types in logs

Wed, 07 Jan 2026 19:28:46 GMT

loggingredactor <0.0.6, fixed in 0.0.6. CVSS 2.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-21673: iccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()

Tue, 06 Jan 2026 01:32:21 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13720: Incorrect type conversion in Google Chrome

Tue, 02 Dec 2025 19:00:17 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-62494: Type confusion in string addition in QuickJS

Thu, 16 Oct 2025 15:51:50 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.