# CWE-821.

Every Advisory and CVE whose sources give the weakness CWE-821, newest first.

## Records, newest first

- [Tor: Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which…](https://agentprime.io/advisories/CVE-2026-77584.md)
  `CVE-2026-77584` · CVE record: torproject Tor · CVSS 7.0 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-821
- [libexpat: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c…](https://agentprime.io/advisories/CVE-2026-56132.md)
  `CVE-2026-56132` · CVE record: libexpat project libexpat · CVSS 6.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-821
- [tcp: fix potential race in tcp_v6_syn_recv_sock()](https://agentprime.io/advisories/CVE-2026-43198.md)
  `CVE-2026-43198` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Race condition, CWE-821
- [Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability](https://agentprime.io/advisories/CVE-2026-21919.md)
  `CVE-2026-21919` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-821
- [chainmaker-go: In chainmaker-go (aka ChainMaker) before 2.4.0…](https://agentprime.io/advisories/CVE-2024-58133.md)
  `CVE-2024-58133` · CVE record: ChainMaker chainmaker-go · CVSS 4.0 Medium · Not analysed yet · Published 6 Apr 2025 · Tags: CWE-821
- [chainmaker-go: In chainmaker-go (aka ChainMaker) before 2.3.6…](https://agentprime.io/advisories/CVE-2024-58132.md)
  `CVE-2024-58132` · CVE record: ChainMaker chainmaker-go · CVSS 4.0 Medium · Not analysed yet · Published 6 Apr 2025 · Tags: CWE-821
- [FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a large min_seal_time val…](https://agentprime.io/advisories/CVE-2024-58131.md)
  `CVE-2024-58131` · CVE record: FISCO-BCOS FISCO-BCOS · CVSS 4.0 Medium · Not analysed yet · Published 6 Apr 2025 · Tags: CWE-821
- [BLE peripheral DoS after few cycles of connect/disconnects](https://agentprime.io/advisories/CVE-2024-6657.md)
  `CVE-2024-6657` · CVE record: silabs.com EFR32 BLE SDK · CVSS 6.5 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-821
- [Incorrect Synchronization in GitLab](https://agentprime.io/advisories/CVE-2024-4278.md)
  `CVE-2024-4278` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-821
- [Email Validation Bypass in lunary-ai/lunary](https://agentprime.io/advisories/CVE-2024-5755.md)
  `CVE-2024-5755` · CVE record: lunary-ai lunary-ai/lunary · CVSS 5.3 Medium · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-821
- [Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary](https://agentprime.io/advisories/CVE-2024-1739.md)
  `CVE-2024-1739` · CVE record: lunary-ai lunary-ai/lunary · CVSS 7.5 High · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-821
- [Session Reuse Vulnerability in lunary-ai/lunary](https://agentprime.io/advisories/CVE-2024-1902.md)
  `CVE-2024-1902` · CVE record: lunary-ai lunary-ai/lunary · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-821
- [Qemu: improper ide controller reset can lead to mbr overwrite](https://agentprime.io/advisories/CVE-2023-5088.md)
  `CVE-2023-5088` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-821
- [Incorrect Synchronization in polonel/trudesk](https://agentprime.io/advisories/CVE-2022-1931.md)
  `CVE-2022-1931` · CVE record: polonel polonel/trudesk · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2022 · Tags: CWE-821

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-821>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-821/>. Everything for agents: <https://agentprime.io/llms.txt>.