# CWE-942.

Every Advisory and CVE whose sources give the weakness CWE-942, newest first.

## Records, newest first (an older page)

- [Google Chrome: Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to…](https://agentprime.io/advisories/CVE-2026-8576.md)
  `CVE-2026-8576` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-942
- [Google Chrome: Insufficient policy enforcement in ViewTransitions in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2026-8537.md)
  `CVE-2026-8537` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-942
- [Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads](https://agentprime.io/advisories/CVE-2026-44184.md)
  `CVE-2026-44184` · CVE record: Cleanuparr Cleanuparr · CVSS 8.0 High · Not analysed yet · Published 12 May 2026 · Tags: CWE-346, CWE-942
- [@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools](https://agentprime.io/advisories/GHSA-8jr5-6gvj-rfpf.md)
  `GHSA-8jr5-6gvj-rfpf`, `CVE-2026-44895` · npm `@yoda.digital/gitlab-mcp-server`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 May 2026 · Tags: Authentication bypass, CWE-942
- [ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy](https://agentprime.io/advisories/CVE-2026-7643.md)
  `CVE-2026-7643` · CVE record: ChatGPTNextWeb NextChat · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: CWE-346, CWE-942
- [alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy](https://agentprime.io/advisories/CVE-2026-7581.md)
  `CVE-2026-7581` · CVE record: alexta69 MeTube · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: CWE-346, CWE-942
- [engram: HTTP server CORS wildcard + auth-off-by-default enables CSRF graph exfiltration and persistent indirect prompt injection](https://agentprime.io/advisories/GHSA-2r2p-4cgf-hv7h.md)
  `GHSA-2r2p-4cgf-hv7h` · npm `engramx`: affected `<2.0.2`, fixed in `2.0.2` · CVSS 4.0, no score published · Not analysed yet · Published 22 Apr 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF), CWE-942, CWE-1188
- [Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS](https://agentprime.io/advisories/GHSA-gfc2-9qmw-w7vh.md)
  `GHSA-gfc2-9qmw-w7vh`, `CVE-2026-34839`, `PYSEC-2026-2175` · PyPI `glances`: affected `<4.5.4`, fixed in `4.5.4` · CVSS 7.7 High · Not analysed yet · Published 21 Apr 2026 · Tags: Information disclosure, Authentication bypass, CWE-942
- [ericc-ch copilot-api Token Endpoint server.ts cors cross-domain policy](https://agentprime.io/advisories/CVE-2026-6662.md)
  `CVE-2026-6662` · CVE record: ericc-ch copilot-api · CVSS 6.9 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: CWE-346, CWE-942
- [WWBN AVideo has CORS Origin Reflection with Credentials on Sensitive API Endpoints Enables Cross-Origin Account Takeover](https://agentprime.io/advisories/GHSA-ccq9-r5cw-5hwq.md)
  `GHSA-ccq9-r5cw-5hwq`, `CVE-2026-41056`, `PKSA-5c4b-gnfd-8xsq` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-942
- [farion1231 cc-switch ProxyServer server.rs cross-domain policy](https://agentprime.io/advisories/CVE-2026-6143.md)
  `CVE-2026-6143` · CVE record: farion1231 cc-switch · CVSS 5.3 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-346, CWE-942
- [PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint](https://agentprime.io/advisories/GHSA-x462-jjpc-q4q4.md)
  `GHSA-x462-jjpc-q4q4` · PyPI `praisonaiagents`: affected `<4.5.128`, fixed in `4.5.128` · CVSS 8.1 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-942
- [Permissive Cross-domain Policy with Untrusted Domains in coolercontrold](https://agentprime.io/advisories/CVE-2026-5302.md)
  `CVE-2026-5302` · CVE record: CoolerControl coolercontrold · CVSS 6.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-942
- [vanna-ai vanna FastAPI/Flask Server cross-domain policy](https://agentprime.io/advisories/CVE-2026-5321.md)
  `CVE-2026-5321` · CVE record: vanna-ai vanna · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-346, CWE-942
- [openssl-encrypt has CORS wildcard with allow_credentials=True in standalone servers](https://agentprime.io/advisories/GHSA-c65f-x25w-62jv.md)
  `GHSA-c65f-x25w-62jv`, `CVE-2026-74881`, `PYSEC-2026-3977` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 7.1 High · Not analysed yet · Published 1 Apr 2026 · Tags: Broken access control, CWE-942
- [SiYuan is Vulnerable to Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection](https://agentprime.io/advisories/GHSA-68p4-j234-43mv.md)
  `GHSA-68p4-j234-43mv`, `CVE-2026-34449`, `GO-2026-5171` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<3.6.2`, fixed in `3.6.2` · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-942
- [Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface](https://agentprime.io/advisories/GHSA-6fpf-248c-m7wm.md)
  `GHSA-6fpf-248c-m7wm`, `CVE-2026-34227`, `GO-2026-5175` · Go `github.com/bishopfox/sliver`: affected `<1.7.4`, fixed in `1.7.4` · CVSS 5.9 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Authentication bypass, CWE-942
- [Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port](https://agentprime.io/advisories/CVE-2026-34200.md)
  `CVE-2026-34200` · CVE record: nhost nhost · CVSS 7.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Authentication bypass, CWE-942
- [Information disclosure via CORS misconfiguration](https://agentprime.io/advisories/CVE-2026-0397.md)
  `CVE-2026-0397` · CVE record: PowerDNS DNSdist · CVSS 3.1 Low · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-942
- [MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: \*)](https://agentprime.io/advisories/GHSA-hv2w-8mjj-jw22.md)
  `GHSA-hv2w-8mjj-jw22`, `CVE-2026-34237` · Maven `io.modelcontextprotocol.sdk:mcp-core`: affected `>=1.0.0, <1.0.1 || >=1.1.0, <1.1.1 || <0.18.3`, fixed in `1.0.1`, `1.1.1`, `0.18.3` · CVSS 6.1 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-942
- [Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard](https://agentprime.io/advisories/GHSA-7p93-6934-f4q7.md)
  `GHSA-7p93-6934-f4q7`, `CVE-2026-33533`, `PYSEC-2026-2173` · PyPI `glances`: affected `<4.5.3`, fixed in `4.5.3` · CVSS 7.1 High · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-942
- [HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability](https://agentprime.io/advisories/CVE-2025-55274.md)
  `CVE-2025-55274` · CVE record: HCL Aftermarket DPC · CVSS 2.6 Low · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-942
- [qui CORS Misconfiguration: Arbitrary Origins Trusted](https://agentprime.io/advisories/GHSA-h8vw-ph9r-xpch.md)
  `GHSA-h8vw-ph9r-xpch`, `CVE-2026-30924`, `GO-2026-4774` · Go `github.com/autobrr/qui`: affected `<1.15.0`, fixed in `1.15.0` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-942
- [AVideo affected by Session Hijacking via Unauthenticated Session ID Disclosure with Permissive CORS](https://agentprime.io/advisories/GHSA-qc3p-398r-p59j.md)
  `GHSA-qc3p-398r-p59j`, `CVE-2026-33043`, `PKSA-pcdx-pg9p-v4gz` · Packagist `wwbn/avideo`: affected `<=25.0`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-942
- [Glances's Default CORS Configuration Allows Cross-Origin Credential Theft](https://agentprime.io/advisories/GHSA-9jfm-9rc6-2hfq.md)
  `GHSA-9jfm-9rc6-2hfq`, `CVE-2026-32610`, `PYSEC-2026-2169` · PyPI `glances`: affected `<4.5.2`, fixed in `4.5.2` · CVSS 8.1 High · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-942
- [AnythingLLM Permissable CORS policy](https://agentprime.io/advisories/CVE-2026-32617.md)
  `CVE-2026-32617` · CVE record: Mintplex-Labs anything-llm · CVSS 7.1 High · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-942, CWE-1188
- [TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS](https://agentprime.io/advisories/GHSA-8pw3-9m7f-q734.md)
  `GHSA-8pw3-9m7f-q734`, `CVE-2026-28792` · npm `@tinacms/cli`: affected `<2.1.8`, fixed in `2.1.8` · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2026 · Tags: Path traversal, CWE-942
- [mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft](https://agentprime.io/advisories/GHSA-g9rg-8vq5-mpwm.md)
  `GHSA-g9rg-8vq5-mpwm`, `CVE-2026-33010`, `PYSEC-2026-2625` · PyPI `mcp-memory-service`: affected `<10.25.1`, fixed in `10.25.1` · CVSS 8.1 High · Not analysed yet · Published 7 Mar 2026 · Tags: CWE-942
- [CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure](https://agentprime.io/advisories/CVE-2026-27579.md)
  `CVE-2026-27579` · CVE record: karnop realtime-collaboration-platform · CVSS 7.4 High · Not analysed yet · Published 21 Feb 2026 · Tags: CWE-346, CWE-942
- [Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers](https://agentprime.io/advisories/CVE-2025-9292.md)
  `CVE-2025-9292` · CVE record: TP-Link Systems Inc. Omada Cloud Controller · CVSS 2.0 Low · Not analysed yet · Published 13 Feb 2026 · Tags: CWE-942
- [Litestar's CORS origin allowlist has a bypass due to unescaped regex metacharacters in allowed origins](https://agentprime.io/advisories/GHSA-2p2x-hpg8-cqp2.md)
  `GHSA-2p2x-hpg8-cqp2`, `CVE-2026-25478`, `PYSEC-2026-2195` · PyPI `litestar`: affected `>=2.19.0, <2.20.0`, fixed in `2.20.0` · CVSS 7.4 High · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-942
- [Next.js - Critical - Access bypass - SA-CONTRIB-2025-122](https://agentprime.io/advisories/CVE-2025-13984.md)
  `CVE-2025-13984` · CVE record: Drupal Next.js · CVSS 6.1 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-942
- [Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access](https://agentprime.io/advisories/CVE-2026-24435.md)
  `CVE-2026-24435` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 7.1 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-942
- [Altium 365 Over-Permissive CORS Configuration Allows Credentialed Cross-Origin Workspace Access](https://agentprime.io/advisories/CVE-2026-1181.md)
  `CVE-2026-1181` · CVE record: Altium Altium 365 · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2026 · Tags: Broken access control, CWE-942
- [OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution](https://agentprime.io/advisories/GHSA-vxw4-wv6m-9hhh.md)
  `GHSA-vxw4-wv6m-9hhh`, `CVE-2026-22812` · npm `opencode-ai`: affected `<1.0.216`, fixed in `1.0.216` · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 13 Jan 2026 · Tags: Authentication bypass, CWE-749, CWE-942
- [A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-C…](https://agentprime.io/advisories/CVE-2025-55462.md)
  `CVE-2025-55462` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-942
- [Same-origin policy bypass in the DOM: Workers component](https://agentprime.io/advisories/CVE-2025-13019.md)
  `CVE-2025-13019` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-942
- [Same-origin policy bypass in the DOM: Notifications component](https://agentprime.io/advisories/CVE-2025-13017.md)
  `CVE-2025-13017` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-942
- [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2025-43480.md)
  `CVE-2025-43480` · CVE record: Apple Safari and 4 more · CVSS 8.1 High · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-942
- [The issue was addressed with improved handling of caches.](https://agentprime.io/advisories/CVE-2025-43392.md)
  `CVE-2025-43392` · CVE record: Apple Safari and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-942
- [PILOS Misconfigured the Access-Control-Allow-Origin Header](https://agentprime.io/advisories/CVE-2025-62523.md)
  `CVE-2025-62523` · CVE record: THM-Health PILOS · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-942
- [Strapi core vulnerable to sensitive data exposure via CORS misconfiguration](https://agentprime.io/advisories/GHSA-9329-mxxw-qwf8.md)
  `GHSA-9329-mxxw-qwf8`, `CVE-2025-53092` · npm `@strapi/core`: affected `<5.20.0`, fixed in `5.20.0` · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: Information disclosure, Broken access control, CWE-364, CWE-942
- [IBM Aspera Faspex cross-origin resource sharing](https://agentprime.io/advisories/CVE-2023-37401.md)
  `CVE-2023-37401` · CVE record: IBM Aspera Faspex · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-942
- [CodeCanyon/ui-lib Mentor LMS API cross-domain policy](https://agentprime.io/advisories/CVE-2025-11304.md)
  `CVE-2025-11304` · CVE record: CodeCanyon Mentor LMS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2025 · Tags: CWE-346, CWE-942
- [Cross-origin resource sharing (CORS) in Hiberus Sintra](https://agentprime.io/advisories/CVE-2025-41010.md)
  `CVE-2025-41010` · CVE record: Hiberus Sintra · CVSS 5.1 Medium · Not analysed yet · Published 2 Oct 2025 · Tags: CWE-942
- [cors-anywhere vulnerable to server-side request forgery](https://agentprime.io/advisories/GHSA-r3jv-xfgx-gj24.md)
  `GHSA-r3jv-xfgx-gj24`, `CVE-2020-36851` · npm `cors-anywhere`: affected `<=0.4.4`, no fixed version yet · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: Server-side request forgery (SSRF), CWE-942
- [Same-origin policy bypass in the Layout component](https://agentprime.io/advisories/CVE-2025-10529.md)
  `CVE-2025-10529` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-942
- [@musistudio/claude-code-router has improper CORS configuration](https://agentprime.io/advisories/GHSA-8hmm-4crw-vm2c.md)
  `GHSA-8hmm-4crw-vm2c`, `CVE-2025-57755` · npm `@musistudio/claude-code-router`: affected `<1.0.34`, fixed in `1.0.34` · CVSS 8.1 High · Not analysed yet · Published 21 Aug 2025 · Tags: Information disclosure, CWE-942
- [IBM Concert Software cross-origin resource sharing](https://agentprime.io/advisories/CVE-2025-27909.md)
  `CVE-2025-27909` · CVE record: IBM Concert Software · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-942
- [Overly Permissive CORS Policy in WAGO Device Manager](https://agentprime.io/advisories/CVE-2025-25264.md)
  `CVE-2025-25264` · CVE record: WAGO CC100 0751-9x01 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Jun 2025 · Tags: CWE-942
- [CORS vulnerability in IDF and ZLF](https://agentprime.io/advisories/CVE-2025-41366.md)
  `CVE-2025-41366` · CVE record: ZIV IDF and ZLF · CVSS 5.1 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-942
- [CORS vulnerability in IDF and ZLF](https://agentprime.io/advisories/CVE-2025-41363.md)
  `CVE-2025-41363` · CVE record: ZIV IDF and ZLF · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-942
- [itwanger paicoding CrossUtil.java cross-domain policy](https://agentprime.io/advisories/CVE-2025-4839.md)
  `CVE-2025-4839` · CVE record: itwanger paicoding · CVSS 2.3 Low · Not analysed yet · Published 17 May 2025 · Tags: CWE-346, CWE-942
- [Freeebird Hotel 酒店管理系统 API SessionInterceptor.java cross-domain policy](https://agentprime.io/advisories/CVE-2025-4542.md)
  `CVE-2025-4542` · CVE record: Freeebird Hotel 酒店管理系统 API · CVSS 2.3 Low · Not analysed yet · Published 11 May 2025 · Tags: CWE-346, CWE-942
- [Zylon PrivateGPT settings.yaml cross-domain policy](https://agentprime.io/advisories/CVE-2025-4515.md)
  `CVE-2025-4515` · CVE record: Zylon PrivateGPT · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2025 · Tags: CWE-346, CWE-942
- [Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.](https://agentprime.io/advisories/CVE-2025-25234.md)
  `CVE-2025-25234` · CVE record: Omnissa Omnissa Unified Access Gateway (UAG) · CVSS 7.1 High · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-942
- [Improper Access Control In DestinyECM](https://agentprime.io/advisories/CVE-2024-11071.md)
  `CVE-2024-11071` · CVE record: Cyberdigm DestinyECM · CVSS 7.7 High · Not analysed yet · Published 7 Apr 2025 · Tags: Cross-site request forgery (CSRF), CWE-942
- [Bruno ignores Safe-Mode in Asserts expressions](https://agentprime.io/advisories/CVE-2025-30354.md)
  `CVE-2025-30354` · CVE record: usebruno bruno · CVSS 8.7 High · Not analysed yet · Published 1 Apr 2025 · Tags: CWE-942
- [Reflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU](https://agentprime.io/advisories/CVE-2025-2865.md)
  `CVE-2025-2865` · CVE record: Arteche saTECH BCU · CVSS 2.4 Low · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-942
- [Mindskip xzs-mysql 学之思开源考试系统 CORS cross-domain policy](https://agentprime.io/advisories/CVE-2025-1083.md)
  `CVE-2025-1083` · CVE record: Mindskip xzs-mysql 学之思开源考试系统 · CVSS 2.3 Low · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-346, CWE-942

Newest: <https://agentprime.io/advisories/tag/cwe-942.md>
Older: <https://agentprime.io/advisories/tag/cwe-942.md?cursor=WyIyMDI1LTAyLTA2VDIzOjAwOjExLjAxOTAwMFoiLCJDVkUtMjAyNS0xMDgzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-942&cursor=WyIyMDI2LTA1LTE0VDIwOjE1OjA4LjAwMDAwMFoiLCJHSFNBLTN2Y3AtY2hmaC1mNnIyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-942/?cursor=WyIyMDI2LTA1LTE0VDIwOjE1OjA4LjAwMDAwMFoiLCJHSFNBLTN2Y3AtY2hmaC1mNnIyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.