# CWE-913.

Every Advisory and CVE whose sources give the weakness CWE-913, newest first.

## Records, newest first (an older page)

- [Synology DiskStation Manager (DSM): Improper control of dynamically-managed code resources vulnerability in WebAPI component…](https://agentprime.io/advisories/CVE-2024-5401.md)
  `CVE-2024-5401` · CVE record: Synology DiskStation Manager (DSM) and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Dec 2025 · Tags: CWE-913
- [GZDoom engine allows arbitrary code execution via ZScript actor states](https://agentprime.io/advisories/CVE-2025-54065.md)
  `CVE-2025-54065` · CVE record: ZDoom gzdoom · CVSS 7.8 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-913
- [Intel(R) NPU Drivers: Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers…](https://agentprime.io/advisories/CVE-2025-26405.md)
  `CVE-2025-26405` · CVE record: Intel(R) NPU Drivers · CVSS 5.1 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-913
- [Rack has a Possible Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-r657-rxjc-j557.md)
  `GHSA-r657-rxjc-j557`, `CVE-2025-61780` · RubyGems `rack`: affected `<2.2.20 || >=3.0, <3.1.18 || >=3.2, <3.2.3`, fixed in `2.2.20`, `3.1.18`, `3.2.3` · CVSS 5.8 Medium · Not analysed yet · Published 10 Oct 2025 · Tags: Information disclosure, CWE-441, CWE-913
- [The Keras \`Model.load_model\` method \*\*silently\*\* ignores \`safe_mode=True\` and allows arbitrary code execution when a \`.h5\`/\`.hdf5\` file is loaded.](https://agentprime.io/advisories/GHSA-36rr-ww3j-vrjv.md)
  `GHSA-36rr-ww3j-vrjv`, `CVE-2025-9905`, `PYSEC-2025-123` · PyPI `keras`: affected `>=3.0.0, <3.11.3`, fixed in `3.11.3` · CVSS 7.3 High · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-913
- [Duplicate Advisory: The Keras \`Model.load_model\` method \*\*silently\*\* ignores \`safe_mode=True\` and allows arbitrary code execution when a \`.h5\`/\`.hdf5\` file is loaded.](https://agentprime.io/advisories/GHSA-77wq-646f-jrm2.md)
  `GHSA-77wq-646f-jrm2` · PyPI `keras`: affected `>=3.0.0, <3.11.3`, fixed in `3.11.3` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-913
- [Remote Code Execution via Unauthenticated Configuration Manipulation](https://agentprime.io/advisories/CVE-2025-25270.md)
  `CVE-2025-25270` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-913
- [Eclipse Foundation Eclipse Open VSX Registry: A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have…](https://agentprime.io/advisories/CVE-2025-6705.md)
  `CVE-2025-6705` · CVE record: Eclipse Foundation Eclipse Open VSX Registry · CVSS 7.6 High · Not analysed yet · Published 27 Jun 2025 · Tags: CWE-653, CWE-913
- [Crafter Studio Groovy Sandbox Bypass](https://agentprime.io/advisories/GHSA-5644-3vgq-2ph5.md)
  `GHSA-5644-3vgq-2ph5`, `CVE-2025-6384` · Maven `org.craftercms:crafter-studio`: affected `>=4.0.0, <4.3.0`, fixed in `4.3.0` · CVSS 7.3 High · Not analysed yet · Published 19 Jun 2025 · Tags: CWE-913
- [comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes](https://agentprime.io/advisories/CVE-2025-6107.md)
  `CVE-2025-6107` · CVE record: comfyanonymous comfyui · CVSS 2.3 Low · Not analysed yet · Published 16 Jun 2025 · Tags: Broken access control, CWE-913
- [NASA CryptoLib: In NASA CryptoLib before 1.3.2, the key state is not checked before use…](https://agentprime.io/advisories/CVE-2025-46675.md)
  `CVE-2025-46675` · CVE record: NASA CryptoLib · CVSS 3.5 Low · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-913
- [NASA CryptoLib: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state…](https://agentprime.io/advisories/CVE-2025-46673.md)
  `CVE-2025-46673` · CVE record: NASA CryptoLib · CVSS 4.9 Medium · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-913
- [Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC](https://agentprime.io/advisories/CVE-2022-31764.md)
  `CVE-2022-31764` · CVE record: Apache Software Foundation Apache ShardingSphere ElasticJob-UI · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-913
- [Sentry SDK Prototype Pollution gadget in JavaScript SDKs](https://agentprime.io/advisories/GHSA-593m-55hh-j8gv.md)
  `GHSA-593m-55hh-j8gv` · npm `@sentry/browser`: affected `<7.119.1 || >=8.0.0-alpha.1, <8.33.0`, fixed in `7.119.1`, `8.33.0` · CVSS 5.6 Medium · Not analysed yet · Published 3 Oct 2024 · Tags: CWE-913
- [Langflow Privilege Escalation](https://agentprime.io/advisories/CVE-2024-7297.md)
  `CVE-2024-7297` · CVE record · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.21 · Not analysed yet · Published 30 Jul 2024 · Tags: CWE-913
- [dbt has an implicit override for built-in materializations from installed packages](https://agentprime.io/advisories/GHSA-p3f3-5ccg-83xq.md)
  `GHSA-p3f3-5ccg-83xq`, `CVE-2024-40637`, `PYSEC-2024-66` · PyPI `dbt-core`: affected `>=1.6.0, <1.6.14 || >=1.7.0, <1.7.14`, fixed in `1.6.14`, `1.7.14` · CVSS 4.2 Medium · Not analysed yet · Published 17 Jul 2024 · Tags: Other injection, SQL injection, CWE-913
- [Remote code execution in pytorch lightning](https://agentprime.io/advisories/GHSA-cgwc-qvrx-rf7f.md)
  `GHSA-cgwc-qvrx-rf7f`, `CVE-2024-5452`, `PYSEC-2026-385`, `PYSEC-2026-3974` · PyPI `lightning`: affected `<2.3.3`, fixed in `2.3.3` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.27 · Not analysed yet · Published 6 Jun 2024 · Tags: Broken access control, CWE-913
- [Electron Code Injection in Logi Tune macOS Application](https://agentprime.io/advisories/CVE-2024-2537.md)
  `CVE-2024-2537` · CVE record: Logitech Logi Tune · CVSS 4.4 Medium · Not analysed yet · Published 15 Mar 2024 · Tags: CWE-913
- [Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution](https://agentprime.io/advisories/GHSA-xp2r-g8qq-44hh.md)
  `GHSA-xp2r-g8qq-44hh`, `CVE-2024-27135` · Maven `org.apache.pulsar:pulsar-functions-worker`: affected `>=2.4.0, <2.10.6 || >=2.11.0, <2.11.4 || >=3.0.0, <3.0.3 || >=3.1.0, <3.1.3 || >=3.2.0, <3.2.1`, fixed in `2.10.6`, `2.11.4`, `3.0.3`, `3.1.3`, `3.2.1` · CVSS 8.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20, CWE-913
- [RPyC's missing security check results in code execution when using numpy.array on the server-side.](https://agentprime.io/advisories/GHSA-h5cg-53g7-gqjw.md)
  `GHSA-h5cg-53g7-gqjw`, `CVE-2024-27758`, `PYSEC-2024-44` · PyPI `rpyc`: affected `>=4.0.0, <6.0.0`, fixed in `6.0.0` · CVSS 8.5 High · Not analysed yet · Published 6 Mar 2024 · Tags: Authentication bypass, CWE-358, CWE-913
- [Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets](https://agentprime.io/advisories/GHSA-37vr-vmg4-jwpw.md)
  `GHSA-37vr-vmg4-jwpw`, `BIT-solr-2023-50386`, `CVE-2023-50386` · Maven `org.apache.solr:solr-core`: affected `>=6.0.0, <8.11.3 || >=9.0.0, <9.4.1`, fixed in `8.11.3`, `9.4.1` · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.84 · Not analysed yet · Published 9 Feb 2024 · Tags: Unrestricted file upload, CWE-913
- [Cloud Software Group Citrix Session Recording: Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform…](https://agentprime.io/advisories/CVE-2023-6184.md)
  `CVE-2023-6184` · CVE record: Cloud Software Group Citrix Session Recording · CVSS 5.0 Medium · EPSS 0.47 · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-913
- [Eclipse Glassfish remote code execution issue](https://agentprime.io/advisories/GHSA-2mw4-wj8c-7f93.md)
  `GHSA-2mw4-wj8c-7f93`, `CVE-2023-5763` · Maven `org.glassfish.main.orb:orb-connector`: affected `>=5.0.0, <7.0.0`, fixed in `7.0.0` · CVSS 6.8 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-20, CWE-913
- [TorchServe Pre-Auth Remote Code Execution](https://agentprime.io/advisories/GHSA-4mqg-h5jf-j9m7.md)
  `GHSA-4mqg-h5jf-j9m7` · PyPI `torchserve`: affected `>=0.3.0, <0.8.2`, fixed in `0.8.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2023 · Tags: CWE-913
- [Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability](https://agentprime.io/advisories/CVE-2023-4041.md)
  `CVE-2023-4041` · CVE record: Silicon Labs Gecko Bootloader · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Aug 2023 · Tags: Memory corruption, CWE-913
- [RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape](https://agentprime.io/advisories/GHSA-wqc8-x2pr-7jqh.md)
  `GHSA-wqc8-x2pr-7jqh`, `CVE-2023-37271`, `PYSEC-2023-118` · PyPI `restrictedpython`: affected `<5.3 || >=6.0a1.dev0, <6.1`, fixed in `5.3`, `6.1` · CVSS 8.4 High · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-913
- [SpiceDB's LookupResources may return partial results](https://agentprime.io/advisories/GHSA-m54h-5x5f-5m6r.md)
  `GHSA-m54h-5x5f-5m6r`, `CVE-2023-35930`, `GO-2023-1871` · Go `github.com/authzed/spicedb`: affected `>=1.22.0, <1.22.2`, fixed in `1.22.2` · CVSS 3.7 Low · Not analysed yet · Published 28 Jun 2023 · Tags: CWE-913
- [vm2 Sandbox Escape vulnerability](https://agentprime.io/advisories/GHSA-xj72-wvfv-8985.md)
  `GHSA-xj72-wvfv-8985`, `CVE-2023-29199` · npm `vm2`: affected `<3.9.16`, fixed in `3.9.16` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-913
- [vm2 vulnerable to sandbox escape](https://agentprime.io/advisories/GHSA-7jxr-cg7f-gpgv.md)
  `GHSA-7jxr-cg7f-gpgv`, `CVE-2023-29017` · npm `vm2`: affected `<3.9.15`, fixed in `3.9.15` · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.63 · Not analysed yet · Published 7 Apr 2023 · Tags: CWE-913
- [sqlite vulnerable to code execution due to Object coercion](https://agentprime.io/advisories/GHSA-jqv5-7xpx-qj74.md)
  `GHSA-jqv5-7xpx-qj74`, `CVE-2022-43441` · npm `sqlite3`: affected `>=5.0.0, <5.1.5`, fixed in `5.1.5` · CVSS 8.1 High · Not analysed yet · Published 13 Mar 2023 · Tags: Broken access control, CWE-913
- [JSON Injection in DataHub](https://agentprime.io/advisories/CVE-2023-25560.md)
  `CVE-2023-25560` · CVE record: datahub-project datahub · CVSS 8.2 High · Not analysed yet · Published 10 Feb 2023 · Tags: CWE-913
- [An issue was discovered in BACKCLICK Professional 5.9.63.](https://agentprime.io/advisories/CVE-2022-44000.md)
  `CVE-2022-44000` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Nov 2022 · Tags: Authentication bypass, CWE-913
- [vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host](https://agentprime.io/advisories/GHSA-mrgp-mrhc-5jrq.md)
  `GHSA-mrgp-mrhc-5jrq`, `CVE-2022-36067` · npm `vm2`: affected `<3.9.11`, fixed in `3.9.11` · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.48 · Not analysed yet · Published 28 Sept 2022 · Tags: CWE-913
- [Budibase Improper Control of Dynamically-Managed Code Resources vulnerability](https://agentprime.io/advisories/GHSA-x92g-49gh-63qm.md)
  `GHSA-x92g-49gh-63qm`, `CVE-2022-3225` · npm `@budibase/bbui` and 2 more: affected `<1.3.20`, fixed in `1.3.20` · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2022 · Tags: Broken access control, CWE-913
- [CrafterCMS OS Command Injection vulnerability](https://agentprime.io/advisories/GHSA-j6x3-3jqq-m922.md)
  `GHSA-j6x3-3jqq-m922`, `CVE-2022-40635` · Maven `org.craftercms:craftercms`: affected `>=3.1.0, <3.1.23`, fixed in `3.1.23` · CVSS 6.4 Medium · Not analysed yet · Published 14 Sept 2022 · Tags: Command injection, CWE-913
- [CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources](https://agentprime.io/advisories/GHSA-2jv3-v37p-65w3.md)
  `GHSA-2jv3-v37p-65w3`, `CVE-2022-40634` · Maven `org.craftercms:crafter-studio`: affected `>=3.1.0, <3.1.23`, fixed in `3.1.23` · CVSS 6.4 Medium · Not analysed yet · Published 14 Sept 2022 · Tags: Command injection, CWE-913
- [Perl Code execution in Template Toolkit](https://agentprime.io/advisories/CVE-2022-39051.md)
  `CVE-2022-39051` · CVE record: OTRS AG OTRS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Sept 2022 · Tags: CWE-913
- [Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources](https://agentprime.io/advisories/GHSA-r6fx-55x3-f9x6.md)
  `GHSA-r6fx-55x3-f9x6`, `CVE-2021-23267` · Maven `org.craftercms:crafter-studio`: affected `>=3.1.0, <3.1.18`, fixed in `3.1.18` · CVSS 7.6 High · Not analysed yet · Published 17 May 2022 · Tags: CWE-913
- [Deserialization of Untrusted Data in Flamingo amf-serializer](https://agentprime.io/advisories/GHSA-j88v-q3vw-p9vr.md)
  `GHSA-j88v-q3vw-p9vr`, `CVE-2017-3202` · Maven `com.exadel.flamingo.flex:amf-serializer`: affected `<=2.2.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2022 · Tags: Insecure deserialization, CWE-913
- [GraniteDS Insecure Deserialization](https://agentprime.io/advisories/GHSA-vx9j-rvmj-jc32.md)
  `GHSA-vx9j-rvmj-jc32`, `CVE-2017-3200` · Maven `org.graniteds:granite-server-core`: affected `<=3.1.1.GA`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 13 May 2022 · Tags: Insecure deserialization, CWE-913
- [Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio](https://agentprime.io/advisories/GHSA-wq3v-3grq-6f86.md)
  `GHSA-wq3v-3grq-6f86`, `CVE-2020-25802` · Maven `org.craftercms:crafter-studio`: affected `>=3.0, <3.0.27 || >=3.1, <3.1.7`, fixed in `3.0.27`, `3.1.7` · CVSS 4.2 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-913
- [Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio](https://agentprime.io/advisories/GHSA-8786-wg74-f522.md)
  `GHSA-8786-wg74-f522`, `CVE-2020-25803` · Maven `org.craftercms:crafter-studio`: affected `>=3.0, <3.0.27 || >=3.1, <3.1.7`, fixed in `3.0.27`, `3.1.7` · CVSS 4.2 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-913
- [The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library](https://agentprime.io/advisories/CVE-2021-42809.md)
  `CVE-2021-42809` · CVE record: Thales Sentinel Protection Installer · CVSS 6.5 Medium · Not analysed yet · Published 20 Dec 2021 · Tags: CWE-913
- [Serialization gadgets exploit in jackson-databind](https://agentprime.io/advisories/GHSA-r3gr-cxrf-hg25.md)
  `GHSA-r3gr-cxrf-hg25`, `CVE-2020-35491` · Maven `com.fasterxml.jackson.core:jackson-databind`: affected `>=2.0.0, <2.9.10.8`, fixed in `2.9.10.8` · CVSS 8.1 High · Not analysed yet · Published 9 Dec 2021 · Tags: Insecure deserialization, CWE-913
- [Snakeyaml deserialization vulnerability bypass](https://agentprime.io/advisories/CVE-2021-23262.md)
  `CVE-2021-23262` · CVE record: Crafter Software Crafter CMS · CVSS 4.2 Medium · Not analysed yet · Published 2 Dec 2021 · Tags: CWE-913
- [Groovy Sandbox Bypass](https://agentprime.io/advisories/CVE-2021-23259.md)
  `CVE-2021-23259` · CVE record: Crafter Software Crafter CMS · CVSS 4.2 Medium · Not analysed yet · Published 2 Dec 2021 · Tags: CWE-913
- [Spring SPEL Expression Language Injection](https://agentprime.io/advisories/CVE-2021-23258.md)
  `CVE-2021-23258` · CVE record: Crafter Software Crafter CMS · CVSS 4.2 Medium · Not analysed yet · Published 2 Dec 2021 · Tags: CWE-913
- [Prototype Pollution in config-handler](https://agentprime.io/advisories/GHSA-2w3f-9w3q-qw77.md)
  `GHSA-2w3f-9w3q-qw77`, `CVE-2021-23448`, `SNYK-JS-CONFIGHANDLER-1564947` · npm `config-handler`: affected `<=2.0.3`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2021 · Tags: CWE-913
- [Header dropping in traefik](https://agentprime.io/advisories/GHSA-m697-4v8f-55qg.md)
  `GHSA-m697-4v8f-55qg`, `CVE-2021-32813`, `GO-2022-0923` · Go `github.com/traefik/traefik` and 1 more: affected `<=1.7.30`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 5 Aug 2021 · Tags: CWE-913
- [Prototype pollution in nestie](https://agentprime.io/advisories/GHSA-m7rg-8wvq-846v.md)
  `GHSA-m7rg-8wvq-846v`, `CVE-2021-25947` · npm `nestie`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jun 2021 · Tags: Prototype pollution, CWE-913
- [Improper Control of Dynamically-Managed Code Resources in config-shield](https://agentprime.io/advisories/GHSA-w8h4-vw8f-rvvj.md)
  `GHSA-w8h4-vw8f-rvvj`, `CVE-2021-26276` · npm `config-shield`: affected `<0.2.3`, fixed in `0.2.3` · CVSS 5.3 Medium · Not analysed yet · Published 13 Apr 2021 · Tags: CWE-913
- [Misuse of \`Reference\` and other transferable APIs may lead to access to nodejs isolate](https://agentprime.io/advisories/GHSA-mmhj-4w6j-76h7.md)
  `GHSA-mmhj-4w6j-76h7`, `CVE-2021-21413` · npm `isolated-vm`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 8.0 High · Not analysed yet · Published 6 Apr 2021 · Tags: CWE-913
- [Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability](https://agentprime.io/advisories/CVE-2020-3419.md)
  `CVE-2020-3419` · CVE record: Cisco Cisco WebEx Meetings Server · CVSS 6.5 Medium · Not analysed yet · Published 18 Nov 2020 · Tags: CWE-913
- [Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1617.md)
  `CVE-2019-1617` · CVE record: Cisco Nexus 9000 Series Switches in Standalone NX-OS Mode · CVSS 7.4 High · Not analysed yet · Published 11 Mar 2019 · Tags: CWE-913
- [Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1595.md)
  `CVE-2019-1595` · CVE record: Cisco Cisco NX-OS Software · CVSS 7.4 High · Not analysed yet · Published 6 Mar 2019 · Tags: CWE-913

Newest: <https://agentprime.io/advisories/tag/cwe-913.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-913&cursor=WyIyMDI1LTEyLTA0VDIyOjMyOjA2LjM5NTAwMFoiLCJDVkUtMjAyNS0xNDA1MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-913/?cursor=WyIyMDI1LTEyLTA0VDIyOjMyOjA2LjM5NTAwMFoiLCJDVkUtMjAyNS0xNDA1MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.