<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-914</title><description>Every new CWE-914 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2019-25777: YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution</title><link>https://agentprime.io/advisories/CVE-2019-25777/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-25777/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 06:50:17 GMT</pubDate><category>CVE</category></item><item><title>toui allows user-specific variables to be shared between users</title><link>https://agentprime.io/advisories/GHSA-hh7j-pg39-q563/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hh7j-pg39-q563/</guid><description>toui &gt;=2.0.1, &lt;2.4.1, fixed in 2.4.1. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 11:50:42 GMT</pubDate><category>PyPI</category><category>toui</category><category>critical</category></item><item><title>vm2 has a Sandbox Escape Vulnerability</title><link>https://agentprime.io/advisories/GHSA-qcp4-v2jj-fjx8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-qcp4-v2jj-fjx8/</guid><description>vm2 &lt;3.11.0, fixed in 3.11.0. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 07 May 2026 03:54:34 GMT</pubDate><category>npm</category><category>vm2</category><category>critical</category></item><item><title>Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr</title><link>https://agentprime.io/advisories/GHSA-69v7-xpr6-6gjm/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-69v7-xpr6-6gjm/</guid><description>lupa &lt;=2.6, no fixed version yet. CVSS 7.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 15:48:13 GMT</pubDate><category>PyPI</category><category>lupa</category></item><item><title>CVE-2026-35173: Chyrp Lite has an IDOR via Mass Assignment in Post Model</title><link>https://agentprime.io/advisories/CVE-2026-35173/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-35173/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 17:48:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14085: youlaitech youlai-mall orders improper control of dynamically-identified variables</title><link>https://agentprime.io/advisories/CVE-2025-14085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14085/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Dec 2025 14:02:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14051: youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables</title><link>https://agentprime.io/advisories/CVE-2025-14051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14051/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Dec 2025 22:32:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-54198: Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP</title><link>https://agentprime.io/advisories/CVE-2024-54198/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-54198/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Dec 2024 00:12:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-24914: Authenticated Gaia users can inject code or commands by global variables through special HTTP requests.</title><link>https://agentprime.io/advisories/CVE-2024-24914/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-24914/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 Nov 2024 11:25:53 GMT</pubDate><category>CVE</category></item></channel></rss>