# CWE-913.

Every Advisory and CVE whose sources give the weakness CWE-913, newest first.

## Records, newest first

- [Google Chrome: Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a…](https://agentprime.io/advisories/CVE-2026-121170.md)
  `CVE-2026-121170` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-913
- [Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution](https://agentprime.io/advisories/GHSA-h26j-4vp7-x9w2.md)
  `GHSA-h26j-4vp7-x9w2`, `CVE-2026-62848` · NuGet `Metalama.Framework`: affected `<2025.1.18 || >=2026.0.1-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19`, fixed in `2025.1.18`, `2026.0.25`, `2026.1.19` · CVSS 7.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Insecure deserialization, CWE-913
- [a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-118538.md)
  `CVE-2026-118538` · CVE record: a2ui-project a2ui · CVSS 5.1 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Broken access control, CWE-913
- [A flaw was found in GStreamer Editing Services (gst-editing-services).](https://agentprime.io/advisories/CVE-2026-116612.md)
  `CVE-2026-116612` · CVE record: GStreamer project gst-editing-services · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-913
- [code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-108948.md)
  `CVE-2026-108948` · CVE record: code-projects Online Reviewer System · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control, CWE-913
- [agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources](https://agentprime.io/advisories/CVE-2026-108819.md)
  `CVE-2026-108819` · CVE record: agno-agi agno · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-913
- [Path Traversal leading to Remote Code Execution in Ollama](https://agentprime.io/advisories/CVE-2026-103663.md)
  `CVE-2026-103663` · CVE record: Ollama Ollama · CVSS 6.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal, CWE-913
- [vm2 contains a sandbox escape vulnerability](https://agentprime.io/advisories/GHSA-pq68-rvw4-xp4r.md)
  `GHSA-pq68-rvw4-xp4r`, `CVE-2026-93605` · npm `vm2`: affected `<3.12.1`, fixed in `3.12.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-693, CWE-913
- [vm2: Sandbox Escape (NodeVM)](https://agentprime.io/advisories/GHSA-88hf-g992-jg85.md)
  `GHSA-88hf-g992-jg85`, `CVE-2026-92955` · npm `vm2`: affected `<3.11.8`, fixed in `3.11.8` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-913
- [vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix](https://agentprime.io/advisories/GHSA-3vgf-8m4q-q4qr.md)
  `GHSA-3vgf-8m4q-q4qr`, `CVE-2026-92953` · npm `vm2`: affected `>=3.11.0, <3.11.8`, fixed in `3.11.8` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Prototype pollution, CWE-913
- [vm2: NodeVM \`require.external\` without an explicit \`require.root\` grants unrestricted host filesystem access and full RCE](https://agentprime.io/advisories/GHSA-j3hm-6rg5-mchv.md)
  `GHSA-j3hm-6rg5-mchv`, `CVE-2026-92946` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-913
- [vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass](https://agentprime.io/advisories/GHSA-wjwh-qqvp-g4p4.md)
  `GHSA-wjwh-qqvp-g4p4`, `CVE-2026-92956` · npm `vm2`: affected `>=3.10.1, <3.11.7`, fixed in `3.11.7` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-693, CWE-913
- [Jeebase UserService info updateUser dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-105180.md)
  `CVE-2026-105180` · CVE record: Jeebase · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control, CWE-913
- [vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE](https://agentprime.io/advisories/GHSA-8hr7-r645-pc6w.md)
  `GHSA-8hr7-r645-pc6w`, `CVE-2026-92935` · npm `vm2`: affected `>=3.11.4, <3.11.7`, fixed in `3.11.7` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-913
- [vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector](https://agentprime.io/advisories/GHSA-27g9-p43v-cw3v.md)
  `GHSA-27g9-p43v-cw3v`, `CVE-2026-92944` · npm `vm2`: affected `>=3.10.2, <3.11.7`, fixed in `3.11.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-693, CWE-913
- [Duplicate Advisory: Sandbox Escape (NodeVM)](https://agentprime.io/advisories/GHSA-gg6f-mhqm-f7gp.md)
  `GHSA-gg6f-mhqm-f7gp` · npm `vm2`: affected `<=3.11.7`, no fixed version yet · CVSS 10.0 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-913
- [Duplicate Advisory: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix](https://agentprime.io/advisories/GHSA-5v7w-95g5-pj6q.md)
  `GHSA-5v7w-95g5-pj6q` · npm `vm2`: affected `>=3.11.0, <=3.11.7`, no fixed version yet · CVSS 10.0 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-913
- [Duplicate Advisory: NodeVM \`require.external\` without an explicit \`require.root\` grants unrestricted host filesystem access and full RCE](https://agentprime.io/advisories/GHSA-29x6-9qh5-83gg.md)
  `GHSA-29x6-9qh5-83gg` · npm `vm2`: affected `<=3.11.6`, no fixed version yet · CVSS 10.0 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-913
- [Duplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE](https://agentprime.io/advisories/GHSA-9fxx-mv6c-j5xp.md)
  `GHSA-9fxx-mv6c-j5xp` · npm `vm2`: affected `>=3.11.4, <=3.11.6`, no fixed version yet · CVSS 9.0 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-913
- [Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment](https://agentprime.io/advisories/CVE-2026-90999.md)
  `CVE-2026-90999` · CVE record: Functional Software, Inc. Sentry Seer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Other injection, Code injection, CWE-20, CWE-116
- [a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-92217.md)
  `CVE-2026-92217` · CVE record: a2ui-project a2ui · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control, CWE-913
- [IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection](https://agentprime.io/advisories/CVE-2026-12354.md)
  `CVE-2026-12354` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-913
- [Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)](https://agentprime.io/advisories/CVE-2026-41870.md)
  `CVE-2026-41870` · CVE record: Apache Software Foundation Apache Nutch · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Code injection, Broken access control, CWE-913
- [Apache Impala: RCE via External Data Source Class Loading](https://agentprime.io/advisories/CVE-2026-65181.md)
  `CVE-2026-65181` · CVE record: Apache Software Foundation Apache Impala · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-913
- [Eleveo Quality Management Conversation events dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-85408.md)
  `CVE-2026-85408` · CVE record: Eleveo Quality Management · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control, CWE-913
- [gouguoa edit_personal Endpoint Index.php update dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-84430.md)
  `CVE-2026-84430` · CVE record: gouguoa · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Broken access control, CWE-913
- [Spring Framework Safety Guard Bypass via SpEL Expression Compilation](https://agentprime.io/advisories/CVE-2026-59283.md)
  `CVE-2026-59283` · CVE record: Spring Spring Framework · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-913
- [Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive](https://agentprime.io/advisories/CVE-2026-48105.md)
  `CVE-2026-48105` · CVE record: Basekick-Labs arc · CVSS 8.3 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal, CWE-345, CWE-913
- [Google Chrome: Improper resource control in Linux Toolkit Theming in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2026-76023.md)
  `CVE-2026-76023` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-913
- [asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter](https://agentprime.io/advisories/GHSA-9w56-46f6-3qhx.md)
  `GHSA-9w56-46f6-3qhx`, `CVE-2026-102734` · PyPI `asteval`: affected `<1.0.9`, fixed in `1.0.9` · CVSS 5.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-693, CWE-749, CWE-913
- [Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa](https://agentprime.io/advisories/CVE-2026-71470.md)
  `CVE-2026-71470` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-913
- [vm2: Sandbox Breakout Using Dangerous Host Proto Mutators](https://agentprime.io/advisories/GHSA-cfcw-xp6x-25gj.md)
  `GHSA-cfcw-xp6x-25gj`, `CVE-2026-47698` · npm `vm2`: affected `<3.11.6`, fixed in `3.11.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-913
- [Electerm WebSocket \`upgrade-func\` and \`fs\` handlers allow arbitrary method/function invocation due to missing method-name allowlist](https://agentprime.io/advisories/CVE-2026-73226.md)
  `CVE-2026-73226` · CVE record: electerm electerm · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-913
- [PraisonAI MCP \`tools/call\` path-traversal => RCE via Python \`.pth\` injection](https://agentprime.io/advisories/GHSA-9mqq-jqxf-grvw.md)
  `GHSA-9mqq-jqxf-grvw`, `CVE-2026-44336`, `PYSEC-2026-472` · PyPI `praisonai`: affected `<4.6.34`, fixed in `4.6.34` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Path traversal, Code injection, CWE-20, CWE-829
- [LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading](https://agentprime.io/advisories/GHSA-fjqc-hq36-qh5p.md)
  `GHSA-fjqc-hq36-qh5p`, `CVE-2026-48775`, `PYSEC-2026-2573` · PyPI `langgraph-checkpoint`: affected `<4.1.1`, fixed in `4.1.1` · CVSS 6.8 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Insecure deserialization, CWE-913
- [Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API](https://agentprime.io/advisories/GHSA-qxjp-w3pj-48m7.md)
  `GHSA-qxjp-w3pj-48m7`, `CVE-2026-53753`, `PYSEC-2026-319` · PyPI `crawl4ai`: affected `<0.8.7`, fixed in `0.8.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Code injection, CWE-913
- [vm2 sandbox escape via JSPI-backed Promise \`.finally()\` species bypass](https://agentprime.io/advisories/GHSA-6j2x-vhqr-qr7q.md)
  `GHSA-6j2x-vhqr-qr7q`, `CVE-2026-47210` · npm `vm2`: affected `<3.11.4`, fixed in `3.11.4` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: CWE-913
- [vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE](https://agentprime.io/advisories/GHSA-m4wx-m65x-ghrr.md)
  `GHSA-m4wx-m65x-ghrr`, `CVE-2026-47137` · npm `vm2`: affected `<3.11.4`, fixed in `3.11.4` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: CWE-913
- [vm2 is Vulnerable to Sandbox Breakout Through Promise Species](https://agentprime.io/advisories/GHSA-76w7-j9cq-rx2j.md)
  `GHSA-76w7-j9cq-rx2j`, `CVE-2026-47208` · npm `vm2`: affected `<3.11.4`, fixed in `3.11.4` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: CWE-913
- [vm2 has a Sandbox Escape issue](https://agentprime.io/advisories/GHSA-v6mx-mf47-r5wg.md)
  `GHSA-v6mx-mf47-r5wg`, `CVE-2026-47131` · npm `vm2`: affected `<3.11.4`, fixed in `3.11.4` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: CWE-913
- [An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0.](https://agentprime.io/advisories/CVE-2026-48700.md)
  `CVE-2026-48700` · CVE record: LXQt PCManFM-Qt · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2026 · Tags: CWE-913
- [LiteLLM has a sandbox escape in custom-code guardrail](https://agentprime.io/advisories/GHSA-wxxx-gvqv-xp7p.md)
  `GHSA-wxxx-gvqv-xp7p`, `CVE-2026-40217`, `PYSEC-2026-2601` · PyPI `litellm`: affected `>=1.81.8, <1.83.10`, fixed in `1.83.10` · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 11 May 2026 · Tags: Code injection, CWE-420, CWE-913
- [Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting](https://agentprime.io/advisories/CVE-2026-7381.md)
  `CVE-2026-7381` · CVE record: MIYAGAWA Plack::Middleware::XSendfile · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Apr 2026 · Tags: Information disclosure, CWE-441, CWE-913
- [z-9527 admin User Update Endpoint user.js dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-5251.md)
  `CVE-2026-5251` · CVE record: z-9527 admin · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Broken access control, CWE-913
- [gougucms User Registration Login.php reg_submit dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2026-5248.md)
  `CVE-2026-5248` · CVE record: gougucms · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Broken access control, CWE-913
- [NocoBase Affected by Sandbox Escape to RCE via console.\_stdout Prototype Chain Traversal in Workflow Script Node](https://agentprime.io/advisories/GHSA-px3p-vgh9-m57c.md)
  `GHSA-px3p-vgh9-m57c`, `CVE-2026-34156` · npm `@nocobase/plugin-workflow-javascript`: affected `<2.0.28`, fixed in `2.0.28` · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.35 · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-913
- [Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names](https://agentprime.io/advisories/GHSA-3m5v-4xp5-gjg2.md)
  `GHSA-3m5v-4xp5-gjg2`, `CVE-2026-33286` · RubyGems `graphiti`: affected `<1.10.2`, fixed in `1.10.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-913
- [Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator](https://agentprime.io/advisories/GHSA-9r5j-7r2x-rv4g.md)
  `GHSA-9r5j-7r2x-rv4g`, `CVE-2025-69219`, `PYSEC-2026-2367` · PyPI `apache-airflow-providers-http`: affected `<6.0.0`, fixed in `6.0.0` · CVSS 8.8 High · Not analysed yet · Published 9 Mar 2026 · Tags: CWE-913
- [n8n Has Expression Escape Vulnerability Leading to RCE](https://agentprime.io/advisories/GHSA-6cqr-8cfr-67f8.md)
  `GHSA-6cqr-8cfr-67f8`, `CVE-2026-25049` · npm `n8n`: affected `<1.123.17 || >=2.0.0, <2.5.2`, fixed in `1.123.17`, `2.5.2` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-913
- [Crafter CMS has Improper Control of Dynamically-Managed Code Resources](https://agentprime.io/advisories/GHSA-gj28-gw7w-3pxc.md)
  `GHSA-gj28-gw7w-3pxc`, `CVE-2026-1770` · Maven `org.craftercms:craftercms`: affected `>=4.0.0, <4.5.0`, fixed in `4.5.0` · CVSS 4.5 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-913
- [SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor](https://agentprime.io/advisories/GHSA-wxhw-j4hc-fmq6.md)
  `GHSA-wxhw-j4hc-fmq6`, `CVE-2026-23830` · npm `@nyariv/sandboxjs`: affected `<0.8.26`, fixed in `0.8.26` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jan 2026 · Tags: Code injection, CWE-693, CWE-913
- [vm2 has a Sandbox Escape](https://agentprime.io/advisories/GHSA-99p7-6v5w-7xg8.md)
  `GHSA-99p7-6v5w-7xg8`, `CVE-2026-22709` · npm `vm2`: affected `<3.10.2`, fixed in `3.10.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2026 · Tags: Code injection, CWE-693, CWE-913
- [Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)](https://agentprime.io/advisories/GHSA-w3x5-7c4c-66p9.md)
  `GHSA-w3x5-7c4c-66p9`, `CVE-2025-66398` · npm `signalk-server`: affected `<2.19.0`, fixed in `2.19.0` · CVSS 9.7 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.20 · Not analysed yet · Published 2 Jan 2026 · Tags: Command injection, CWE-913
- [Picklescan does not block ctypes](https://agentprime.io/advisories/GHSA-4675-36f9-wf6r.md)
  `GHSA-4675-36f9-wf6r`, `CVE-2025-71323`, `PYSEC-2026-1782` · PyPI `picklescan`: affected `<0.0.33`, fixed in `0.0.33` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Dec 2025 · Tags: CWE-184, CWE-913
- [n8n Vulnerable to Remote Code Execution via Expression Injection](https://agentprime.io/advisories/GHSA-v98v-ff95-f3cp.md)
  `GHSA-v98v-ff95-f3cp`, `CVE-2025-68613` · npm `n8n`: affected `>=0.211.0, <1.120.4 || >=1.121.0, <1.121.1`, fixed in `1.120.4`, `1.121.1` · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.99 · Not analysed yet · Published 22 Dec 2025 · Tags: CWE-913
- [SamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resources](https://agentprime.io/advisories/CVE-2025-14695.md)
  `CVE-2025-14695` · CVE record: SamuNatsu HaloBot · CVSS 5.3 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-913
- [Ivanti Endpoint Manager: Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior…](https://agentprime.io/advisories/CVE-2025-13659.md)
  `CVE-2025-13659` · CVE record: Ivanti Endpoint Manager · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-913
- [Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution](https://agentprime.io/advisories/CVE-2025-13426.md)
  `CVE-2025-13426` · CVE record: Google Cloud Apigee hybrid Javacallout policy · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-913
- [youlaitech youlai-mall orders improper control of dynamically-identified variables](https://agentprime.io/advisories/CVE-2025-14085.md)
  `CVE-2025-14085` · CVE record: youlaitech youlai-mall · CVSS 5.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-913, CWE-914
- [youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables](https://agentprime.io/advisories/CVE-2025-14051.md)
  `CVE-2025-14051` · CVE record: youlaitech youlai-mall · CVSS 5.3 Medium · Not analysed yet · Published 4 Dec 2025 · Tags: CWE-913, CWE-914

Older: <https://agentprime.io/advisories/tag/cwe-913.md?cursor=WyIyMDI1LTEyLTA0VDIyOjMyOjA2LjM5NTAwMFoiLCJDVkUtMjAyNS0xNDA1MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-913>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-913/>. Everything for agents: <https://agentprime.io/llms.txt>.