<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-76</title><description>Every new CWE-76 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-91184: NGINX Gateway Fabric vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-91184/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91184/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 14:40:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77180: NGINX Ingress Controller vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-77180/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77180/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 15:40:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66362: NGF vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-66362/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66362/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 15:40:54 GMT</pubDate><category>CVE</category></item><item><title>dssrf has an SSRF bypass with remove_at_symbol_in_string</title><link>https://agentprime.io/advisories/GHSA-cg4g-m8jx-vjv2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cg4g-m8jx-vjv2/</guid><description>dssrf &lt;1.0.4, fixed in 1.0.4. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 16:26:52 GMT</pubDate><category>npm</category><category>dssrf</category></item><item><title>CVE-2026-55723: NGINX Ingress Controller vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-55723/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55723/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jul 2026 14:33:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11311: NGINX Gateway Fabric vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-11311/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11311/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 14:04:33 GMT</pubDate><category>CVE</category></item><item><title>simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE</title><link>https://agentprime.io/advisories/GHSA-r275-fr43-pm7q/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-r275-fr43-pm7q/</guid><description>simple-git &gt;=3.15.0, &lt;3.32.3, fixed in 3.32.3. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Mar 2026 18:38:56 GMT</pubDate><category>npm</category><category>simple-git</category><category>critical</category></item><item><title>CVE-2024-4897: Remote Code Execution in parisneo/lollms-webui</title><link>https://agentprime.io/advisories/CVE-2024-4897/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4897/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jul 2024 14:37:36 GMT</pubDate><category>CVE</category></item><item><title>llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata</title><link>https://agentprime.io/advisories/GHSA-56xg-wfcc-g829/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-56xg-wfcc-g829/</guid><description>llama-cpp-python &gt;=0.2.30, &lt;0.2.72, fixed in 0.2.72. CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. CVSS score 9.7 (7.0 or more) and EPSS 0.26 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 13 May 2024 14:10:18 GMT</pubDate><category>PyPI</category><category>llama-cpp-python</category><category>critical</category></item><item><title>LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint</title><link>https://agentprime.io/advisories/GHSA-46cm-pfwv-cgf8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-46cm-pfwv-cgf8/</guid><description>litellm &lt;1.34.42, fixed in 1.34.42. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Apr 2024 18:30:48 GMT</pubDate><category>PyPI</category><category>litellm</category><category>critical</category></item><item><title>CVE-2024-1883: Reflected XSS in PaperCut NG/MF</title><link>https://agentprime.io/advisories/CVE-2024-1883/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1883/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Mar 2024 03:09:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1882: Server-side resource injection in PaperCut NG/MF</title><link>https://agentprime.io/advisories/CVE-2024-1882/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1882/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Mar 2024 03:08:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1221: Improper access controls on APIs on Linux and macOS in PaperCut NG/MF</title><link>https://agentprime.io/advisories/CVE-2024-1221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1221/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Mar 2024 03:01:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21600: Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition</title><link>https://agentprime.io/advisories/CVE-2024-21600/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21600/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jan 2024 00:53:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-1149: Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver</title><link>https://agentprime.io/advisories/CVE-2023-1149/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1149/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Withdrawn Advisory: HTML injections in BTCPayServer</title><link>https://agentprime.io/advisories/GHSA-33gv-rvgq-gpxp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-33gv-rvgq-gpxp/</guid><description>BTCPayServer.Client &lt;1.7.5, fixed in 1.7.5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jan 2023 00:30:18 GMT</pubDate><category>NuGet</category><category>BTCPayServer.Client</category></item></channel></rss>