# CWE-829.

Every Advisory and CVE whose sources give the weakness CWE-829, newest first.

## Records, newest first (an older page)

- [Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout](https://agentprime.io/advisories/CVE-2026-93993.md)
  `CVE-2026-93993` · CVE record: mistralai mistral-vibe · CVSS 8.6 High · Not analysed yet · Published 19 Sept 2026 · Tags: CWE-829
- [CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/CVE-2026-81305.md)
  `CVE-2026-81305` · CVE record: CareCam HMT.CM2507 Firmware · CVSS 7.0 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-829
- [NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI](https://agentprime.io/advisories/CVE-2026-54918.md)
  `CVE-2026-54918` · CVE record: netbox-community devicetype-library · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-15, CWE-829
- [NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing \`tests/\_\_init\_\_.py\` + SSRF via unfixed \`NETBOX_DT_LIBRARY_URL\` → Cloud Metadata credential theft](https://agentprime.io/advisories/CVE-2026-54916.md)
  `CVE-2026-54916` · CVE record: netbox-community devicetype-library · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-427, CWE-829
- [NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request](https://agentprime.io/advisories/CVE-2026-54752.md)
  `CVE-2026-54752` · CVE record: netbox-community devicetype-library · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Insecure deserialization, CWE-829
- [Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration](https://agentprime.io/advisories/CVE-2026-89332.md)
  `CVE-2026-89332` · CVE record: AWS Kiro IDE · CVSS 6.7 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Information disclosure, CWE-829
- [Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME](https://agentprime.io/advisories/CVE-2026-13745.md)
  `CVE-2026-13745` · CVE record: Google Cloud Gemini CLI · CVSS 7.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-15, CWE-829
- [Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File](https://agentprime.io/advisories/CVE-2026-0303.md)
  `CVE-2026-0303` · CVE record: Palo Alto Networks Checkov by Prisma Cloud · CVSS 2.4 Low · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-829
- [functype-mcp-server: MCP \`set_functype_version\` Package Alias RCE via Unsanitized pnpm install + Dynamic Import](https://agentprime.io/advisories/GHSA-wcjj-9m6g-2fr2.md)
  `GHSA-wcjj-9m6g-2fr2`, `CVE-2026-59176` · npm `functype-mcp-server`: affected `<1.4.4`, fixed in `1.4.4` · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-829
- [Joker linter executed project-local .jokerd/linter.\* files during linting](https://agentprime.io/advisories/GHSA-m835-3cm9-rggg.md)
  `GHSA-m835-3cm9-rggg`, `CVE-2026-59172`, `GO-2026-6450` · Go `github.com/candid82/joker`: affected `<1.8.2`, fixed in `1.8.2` · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-829
- [mlflow: Code execution can occur in versions of the MLflow platform running version 0.0.1 or…](https://agentprime.io/advisories/CVE-2026-79721.md)
  `CVE-2026-79721` · CVE record: mlflow mlflow · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-829
- [JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before…](https://agentprime.io/advisories/CVE-2026-86504.md)
  `CVE-2026-86504` · CVE record: JetBrains IntelliJ IDEA · CVSS 7.8 High · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-829
- [Axolotl before 0.19.0 Remote Code Execution via Multipack Patching](https://agentprime.io/advisories/CVE-2026-86169.md)
  `CVE-2026-86169` · CVE record: axolotl-ai-cloud axolotl · CVSS 8.7 High · Not analysed yet · Published 5 Sept 2026 · Tags: CWE-829
- [Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing](https://agentprime.io/advisories/CVE-2026-82525.md)
  `CVE-2026-82525` · CVE record: Exterro FTK Imager · CVSS 6.8 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: XML external entities (XXE), CWE-829
- [Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref](https://agentprime.io/advisories/GHSA-cxq5-97v7-87j8.md)
  `GHSA-cxq5-97v7-87j8`, `CVE-2026-62680` · npm `orval`: affected `<8.22.0`, fixed in `8.22.0` · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.](https://agentprime.io/advisories/CVE-2026-58569.md)
  `CVE-2026-58569` · CVE record: Dell PowerStore 500T and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-829
- [Inclusion of Functionality from Untrusted Control Sphere in GitLab](https://agentprime.io/advisories/CVE-2026-18252.md)
  `CVE-2026-18252` · CVE record: GitLab GitLab · CVSS 7.3 High · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-829
- [PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code](https://agentprime.io/advisories/GHSA-hxmv-c4g6-5fqc.md)
  `GHSA-hxmv-c4g6-5fqc`, `CVE-2026-55522`, `PYSEC-2026-3891`, `PYSEC-2026-3903` · PyPI `praisonai` and 1 more: affected `>=3.9.26, <4.6.58`, fixed in `4.6.58` · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection, CWE-426, CWE-829
- [NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution](https://agentprime.io/advisories/GHSA-ghvf-qf6h-g8x5.md)
  `GHSA-ghvf-qf6h-g8x5` · npm `@nocobase/server`: affected `<2.1.5`, fixed in `2.1.5` · No CVSS score · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal, Information disclosure, Unrestricted file upload, CWE-829
- [Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials](https://agentprime.io/advisories/CVE-2026-76139.md)
  `CVE-2026-76139` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 8.0 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-829
- [Critical flaw impacting OZOLS ERP's automatic update channel](https://agentprime.io/advisories/CVE-2026-22306.md)
  `CVE-2026-22306` · CVE record: Ozols Grupa OZOLS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS, CWE-494, CWE-829
- [MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File](https://agentprime.io/advisories/CVE-2026-45272.md)
  `CVE-2026-45272` · CVE record: PoxenStudio talebook · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection, CWE-829
- [Vim: Arbitrary Ex Command Execution in C Omni-Completion](https://agentprime.io/advisories/CVE-2026-73073.md)
  `CVE-2026-73073` · CVE record: vim vim · CVSS 7.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Code injection, CWE-829
- [WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-73367.md)
  `CVE-2026-73367` · CVE record: supsystic Easy Google Maps · CVSS 7.2 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-829
- [Eclipse Foundation Eclipse Theia: In Eclipse Theia versions up to and including 1.69.0…](https://agentprime.io/advisories/CVE-2026-19884.md)
  `CVE-2026-19884` · CVE record: Eclipse Foundation Eclipse Theia · CVSS 8.4 High · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-15, CWE-829
- [PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands](https://agentprime.io/advisories/CVE-2026-6464.md)
  `CVE-2026-6464` · CVE record: PostgreSQL · CVSS 8.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-829
- [PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client](https://agentprime.io/advisories/CVE-2026-18408.md)
  `CVE-2026-18408` · CVE record: PostgreSQL · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-829
- [Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image](https://agentprime.io/advisories/CVE-2026-71471.md)
  `CVE-2026-71471` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-829
- [Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-9mrh-pw7c-9mqm.md)
  `GHSA-9mrh-pw7c-9mqm`, `BIT-dotnet-2026-62902`, `BIT-dotnet-sdk-2026-62902`, `CVE-2026-62902` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-693, CWE-829
- [Visual Studio Code Python Extension Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-54981.md)
  `CVE-2026-54981` · CVE record: Microsoft Python extension for Visual Studio Code · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-693, CWE-829
- [Vim: Arbitrary Command Execution via Malicious \`.VimballRecord\` Entry Replay in \`vimball.vim\`](https://agentprime.io/advisories/CVE-2026-73076.md)
  `CVE-2026-73076` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection, CWE-829
- [Openjdk-orb: unauthed class loading via iiop in eap](https://agentprime.io/advisories/CVE-2026-15560.md)
  `CVE-2026-15560` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-829
- [html_sanitize_ex HTML5 scrubber keeps attacker-supplied \`\<object>\` elements, allowing untrusted content embedding](https://agentprime.io/advisories/GHSA-xmm9-jc22-rcgj.md)
  `GHSA-xmm9-jc22-rcgj`, `CVE-2026-66843`, `EEF-CVE-2026-66843` · Hex `html_sanitize_ex`: affected `>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3`, fixed in `1.4.5`, `1.5.3` · CVSS 2.3 Low · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-829
- [Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook](https://agentprime.io/advisories/CVE-2026-67623.md)
  `CVE-2026-67623` · CVE record: mistralai mistral-vibe · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-829
- [Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call](https://agentprime.io/advisories/CVE-2026-66902.md)
  `CVE-2026-66902` · CVE record: CJCOLLIER Google::Auth · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Command injection, CWE-829
- [Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)](https://agentprime.io/advisories/GHSA-p5rm-jg5c-8c77.md)
  `GHSA-p5rm-jg5c-8c77`, `CVE-2026-73851` · NuGet `Microsoft.OpenApi.Kiota`: affected `<1.29.1 || >=1.30.0, <1.34.0`, fixed in `1.29.1`, `1.34.0` · CVSS 6.1 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, CWE-829
- [Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by \`kiota info\`](https://agentprime.io/advisories/GHSA-hq9q-27g5-qwpj.md)
  `GHSA-hq9q-27g5-qwpj`, `CVE-2026-59865` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Code injection, CWE-829
- [Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF](https://agentprime.io/advisories/GHSA-4rj6-vrwv-wr8m.md)
  `GHSA-4rj6-vrwv-wr8m`, `CVE-2026-59863` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 7.0 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref](https://agentprime.io/advisories/GHSA-rg4h-fpcp-2qm8.md)
  `GHSA-rg4h-fpcp-2qm8`, `CVE-2026-59867` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-\* extensions](https://agentprime.io/advisories/GHSA-4jwf-m4wg-8p66.md)
  `GHSA-4jwf-m4wg-8p66`, `CVE-2026-59864` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, CWE-829
- [Exim: Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe…](https://agentprime.io/advisories/CVE-2026-66141.md)
  `CVE-2026-66141` · CVE record: Exim Exim · CVSS 7.4 High · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-829
- [JetBrains PyCharm: In JetBrains PyCharm before 2026.1.4…](https://agentprime.io/advisories/CVE-2026-65908.md)
  `CVE-2026-65908` · CVE record: JetBrains PyCharm · CVSS 8.6 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before…](https://agentprime.io/advisories/CVE-2026-64811.md)
  `CVE-2026-64811` · CVE record: JetBrains IntelliJ IDEA · CVSS 7.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains PhpStorm: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting…](https://agentprime.io/advisories/CVE-2026-64809.md)
  `CVE-2026-64809` · CVE record: JetBrains PhpStorm · CVSS 8.4 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains PhpStorm: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting…](https://agentprime.io/advisories/CVE-2026-64808.md)
  `CVE-2026-64808` · CVE record: JetBrains PhpStorm · CVSS 8.4 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a…](https://agentprime.io/advisories/CVE-2026-64807.md)
  `CVE-2026-64807` · CVE record: JetBrains WebStorm · CVSS 7.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…](https://agentprime.io/advisories/CVE-2026-64806.md)
  `CVE-2026-64806` · CVE record: JetBrains WebStorm · CVSS 8.4 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…](https://agentprime.io/advisories/CVE-2026-64805.md)
  `CVE-2026-64805` · CVE record: JetBrains WebStorm · CVSS 8.4 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…](https://agentprime.io/advisories/CVE-2026-64804.md)
  `CVE-2026-64804` · CVE record: JetBrains WebStorm · CVSS 8.4 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-829
- [Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow](https://agentprime.io/advisories/CVE-2026-44359.md)
  `CVE-2026-44359` · CVE record: meshtastic firmware · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2026 · Tags: Code injection, CWE-829
- [Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere](https://agentprime.io/advisories/CVE-2026-16085.md)
  `CVE-2026-16085` · CVE record: Sipeed PicoClaw · CVSS 4.8 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: CWE-829
- [ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository](https://agentprime.io/advisories/CVE-2026-57860.md)
  `CVE-2026-57860` · CVE record: tailcallhq forgecode · CVSS 8.4 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-829
- [OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode](https://agentprime.io/advisories/CVE-2026-62222.md)
  `CVE-2026-62222` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-829
- [Cherry Studio RCE via SearchService nodeIntegration Misconfiguration](https://agentprime.io/advisories/CVE-2026-40501.md)
  `CVE-2026-40501` · CVE record: CherryHQ cherry-studio · CVSS 8.6 High · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-829
- [FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows](https://agentprime.io/advisories/CVE-2026-50562.md)
  `CVE-2026-50562` · CVE record: labring FastGPT · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: Privilege escalation, CWE-494, CWE-829
- [NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause…](https://agentprime.io/advisories/CVE-2026-24226.md)
  `CVE-2026-24226` · CVE record: NVIDIA TensorRT-LLM · CVSS 6.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-829
- [Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-57102.md)
  `CVE-2026-57102` · CVE record: Microsoft Visual Studio Code · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure, CWE-829
- [usestrix PyPI system_prompt.jinja inclusion of functionality from untrusted control sphere](https://agentprime.io/advisories/CVE-2026-15519.md)
  `CVE-2026-15519` · CVE record: usestrix strix · CVSS 2.3 Low · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-829
- [GitHub CLI \`gh codespace jupyter\` could allow remote code execution when connecting to a malicious Codespace](https://agentprime.io/advisories/CVE-2026-59831.md)
  `CVE-2026-59831` · CVE record: cli cli · CVSS 4.4 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-829
- [OpenClaw's marketplace runtime extension metadata could point at unscanned payloads](https://agentprime.io/advisories/GHSA-v6r2-jh58-xx6w.md)
  `GHSA-v6r2-jh58-xx6w`, `CVE-2026-53810` · npm `openclaw`: affected `<2026.5.18`, fixed in `2026.5.18` · CVSS 7.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, Code injection, Broken access control, CWE-829

Newest: <https://agentprime.io/advisories/tag/cwe-829.md>
Older: <https://agentprime.io/advisories/tag/cwe-829.md?cursor=WyIyMDI2LTA3LTAyVDE2OjAwOjQyLjAwMDAwMFoiLCJHSFNBLXY2cjItamg1OC14eDZ3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-829&cursor=WyIyMDI2LTA5LTIxVDIwOjUyOjExLjE2NDAwMFoiLCJDVkUtMjAyNi00OTQ0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-829/?cursor=WyIyMDI2LTA5LTIxVDIwOjUyOjExLjE2NDAwMFoiLCJDVkUtMjAyNi00OTQ0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.