# Other injection.

LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection](https://agentprime.io/advisories/CVE-2026-18686.md)
  `CVE-2026-18686` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 modem.so glc set_upgrade command injection](https://agentprime.io/advisories/CVE-2026-18685.md)
  `CVE-2026-18685` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 modem.so glc remove_profile command injection](https://agentprime.io/advisories/CVE-2026-18684.md)
  `CVE-2026-18684` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [Shlink CSV Formula Injection via Visit Export CLI](https://agentprime.io/advisories/CVE-2026-18738.md)
  `CVE-2026-18738` · CVE record: shlinkio Shlink · CVSS 5.1 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection
- [undici vulnerable to CRLF Injection via blob-like body 'type' property](https://agentprime.io/advisories/GHSA-m8rv-5g2x-5cg5.md)
  `GHSA-m8rv-5g2x-5cg5`, `CVE-2026-15157` · npm `undici`: affected `<6.28.0 || >=7.0.0, <7.29.0 || >=8.0.0, <8.9.0`, fixed in `6.28.0`, `7.29.0`, `8.9.0` · CVSS 4.2 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection
- [undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields](https://agentprime.io/advisories/GHSA-v3r7-h72x-cjcm.md)
  `GHSA-v3r7-h72x-cjcm`, `CVE-2026-16729` · npm `undici`: affected `<6.28.0 || >=7.0.0, <7.29.0 || >=8.0.0, <8.9.0`, fixed in `6.28.0`, `7.29.0`, `8.9.0` · CVSS 4.8 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection
- [GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection](https://agentprime.io/advisories/CVE-2026-18616.md)
  `CVE-2026-18616` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection](https://agentprime.io/advisories/CVE-2026-18615.md)
  `CVE-2026-18615` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection](https://agentprime.io/advisories/CVE-2026-18614.md)
  `CVE-2026-18614` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection](https://agentprime.io/advisories/CVE-2026-18613.md)
  `CVE-2026-18613` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, CWE-707
- [GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection](https://agentprime.io/advisories/CVE-2026-18612.md)
  `CVE-2026-18612` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [Duplicate Advisory: GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)](https://agentprime.io/advisories/GHSA-9xx9-hw38-h2w9.md)
  `GHSA-9xx9-hw38-h2w9` · PyPI `gitpython`: affected `<3.1.53`, fixed in `3.1.53` · CVSS 7.0 High · Withdrawn · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection
- [GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection](https://agentprime.io/advisories/CVE-2026-18602.md)
  `CVE-2026-18602` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection](https://agentprime.io/advisories/CVE-2026-18601.md)
  `CVE-2026-18601` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup](https://agentprime.io/advisories/CVE-2026-9390.md)
  `CVE-2026-9390` · CVE record: TIMLEGGE XML::Sig · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, CWE-1287
- [GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection](https://agentprime.io/advisories/CVE-2026-18600.md)
  `CVE-2026-18600` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection](https://agentprime.io/advisories/CVE-2026-18599.md)
  `CVE-2026-18599` · CVE record: GL.iNet GL-MT3000 · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection](https://agentprime.io/advisories/CVE-2026-18598.md)
  `CVE-2026-18598` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [osCommerce Email Template Configuration EmailController.php EmailController sql injection](https://agentprime.io/advisories/CVE-2026-18592.md)
  `CVE-2026-18592` · CVE record: osCommerce · CVSS 5.1 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, SQL injection
- [LDAP filter injection in legacy jdk1.4 LDAPStoreHelper](https://agentprime.io/advisories/CVE-2026-59652.md)
  `CVE-2026-59652` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection
- [CSV injection in BaserCMS](https://agentprime.io/advisories/CVE-2026-65875.md)
  `CVE-2026-65875` · CVE record: baserCMS Users Community BaserCMS · CVSS 5.1 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection
- [FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection](https://agentprime.io/advisories/CVE-2026-67289.md)
  `CVE-2026-67289` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: Other injection
- [hashi-vault-js has a path traversal and query parameter injection](https://agentprime.io/advisories/GHSA-g956-2f74-rmv7.md)
  `GHSA-g956-2f74-rmv7`, `CVE-2026-55100` · npm `hashi-vault-js`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 8.7 High · Not analysed yet · Published 31 Jul 2026 · Tags: Path traversal, Other injection
- [@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL](https://agentprime.io/advisories/GHSA-pqh8-p93p-2rx7.md)
  `GHSA-pqh8-p93p-2rx7`, `CVE-2026-123810` · npm `@dynatrace-oss/dynatrace-mcp-server`: affected `<2.1.1`, fixed in `2.1.1` · CVSS 4.3 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: SQL injection, Other injection
- [YAML injection via unescaped newlines in ymlr document comments](https://agentprime.io/advisories/GHSA-p8qx-7cp9-v6c9.md)
  `GHSA-p8qx-7cp9-v6c9`, `CVE-2026-65636`, `EEF-CVE-2026-65636` · Hex `ymlr`: affected `>=0.0.1, <5.1.6`, fixed in `5.1.6` · CVSS 2.1 Low · Not analysed yet · Published 31 Jul 2026 · Tags: Other injection
- [389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check](https://agentprime.io/advisories/CVE-2026-11770.md)
  `CVE-2026-11770` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Other injection
- [Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867](https://agentprime.io/advisories/CVE-2026-44617.md)
  `CVE-2026-44617` · CVE record: Apache Software Foundation Apache Zeppelin · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Other injection
- [Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction](https://agentprime.io/advisories/CVE-2026-44616.md)
  `CVE-2026-44616` · CVE record: Apache Software Foundation Apache Zeppelin · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Other injection
- [Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes](https://agentprime.io/advisories/CVE-2026-58222.md)
  `CVE-2026-58222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Other injection
- [Missing input validation / stripping of CRLF characters in SystemConfigManager](https://agentprime.io/advisories/CVE-2026-44092.md)
  `CVE-2026-44092` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Other injection
- [Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-12357.md)
  `CVE-2026-12357` · CVE record: Heimdall Data Database Proxy · CVSS 7.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection
- [Logging operator has Fluentd configuration injection that allows remote code execution](https://agentprime.io/advisories/GHSA-mjqf-28ph-426h.md)
  `GHSA-mjqf-28ph-426h`, `CVE-2026-54680`, `GO-2026-6142` · Go `github.com/kube-logging/logging-operator`: affected `<0.0.0-20260608145523-cf437d7f1e05`, fixed in `0.0.0-20260608145523-cf437d7f1e05` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Command injection
- [swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies](https://agentprime.io/advisories/GHSA-w284-33mx-6g9v.md)
  `GHSA-w284-33mx-6g9v`, `CVE-2026-54666` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection
- [swagger-typescript-api vulnerable to code injection via unescaped enum string values](https://agentprime.io/advisories/GHSA-5f94-x226-ccpm.md)
  `GHSA-5f94-x226-ccpm`, `CVE-2026-54664` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection
- [swagger-typescript-api vulnerable to code injection via unescaped \`servers\[0\].url\` in axios http-client template](https://agentprime.io/advisories/GHSA-38c3-wv3c-v3xj.md)
  `GHSA-38c3-wv3c-v3xj`, `CVE-2026-54661` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection
- [swagger-typescript-api vulnerable to code injection via unescaped \`servers\[0\].url\` in fetch http-client template](https://agentprime.io/advisories/GHSA-hqj5-cw9f-rx67.md)
  `GHSA-hqj5-cw9f-rx67`, `CVE-2026-54662` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection
- [SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title](https://agentprime.io/advisories/CVE-2026-57511.md)
  `CVE-2026-57511` · CVE record: superplanehq superplane · CVSS 6.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection
- [Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export](https://agentprime.io/advisories/CVE-2026-16313.md)
  `CVE-2026-16313` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection
- [Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM](https://agentprime.io/advisories/CVE-2026-18085.md)
  `CVE-2026-18085` · CVE record: BlackBerry UEM · CVSS 5.9 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection
- [Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection](https://agentprime.io/advisories/CVE-2026-66746.md)
  `CVE-2026-66746` · CVE record: tomaka rouille · CVSS 5.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection
- [tiny-http 0.12.0 HTTP Response Splitting via Header Injection](https://agentprime.io/advisories/CVE-2026-66753.md)
  `CVE-2026-66753` · CVE record: tiny-http tiny-http · CVSS 6.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection
- [Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete](https://agentprime.io/advisories/GHSA-pmpg-2mxq-6xwr.md)
  `GHSA-pmpg-2mxq-6xwr`, `CVE-2026-73617` · npm `@budibase/server`: affected `<=3.38.1`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2026 · Tags: SQL injection, Other injection
- [Budibase: NoSQL Injection via JSON Parameter Interpolation in MongoDB Query Execution](https://agentprime.io/advisories/GHSA-qw6m-8fw2-2v64.md)
  `GHSA-qw6m-8fw2-2v64`, `CVE-2026-73618` · npm `@budibase/server`: affected `<=3.38.1`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Other injection
- [yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output](https://agentprime.io/advisories/GHSA-6v4j-43gg-vj32.md)
  `GHSA-6v4j-43gg-vj32`, `CVE-2026-55404`, `PYSEC-2026-3622` · PyPI `yt-dlp`: affected `<2026.7.4`, fixed in `2026.7.4` · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Other injection
- [GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)](https://agentprime.io/advisories/GHSA-3rp5-jjmw-4wv2.md)
  `GHSA-3rp5-jjmw-4wv2`, `CVE-2026-69097`, `PYSEC-2026-3981` · PyPI `gitpython`: affected `<3.1.53`, fixed in `3.1.53` · CVSS 7.3 High · Not analysed yet · Published 24 Jul 2026 · Tags: Other injection
- [CodeAstro Online Classroom loginlinkadmin.php sql injection](https://agentprime.io/advisories/CVE-2026-16765.md)
  `CVE-2026-16765` · CVE record: CodeAstro Online Classroom · CVSS 6.9 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Other injection, SQL injection
- [XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization](https://agentprime.io/advisories/CVE-2026-15037.md)
  `CVE-2026-15037` · CVE record: Qt Qt · CVSS 2.9 Low · Not analysed yet · Published 23 Jul 2026 · Tags: Other injection
- [Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder](https://agentprime.io/advisories/GHSA-gcjf-9mgh-3p7g.md)
  `GHSA-gcjf-9mgh-3p7g`, `CVE-2026-59921` · Maven `io.netty:netty-codec-http`: affected `>=4.2.0.Final, <4.2.16.Final || <4.1.136.Final`, fixed in `4.2.16.Final`, `4.1.136.Final` · CVSS 5.7 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Other injection
- [Netty: STOMP CONNECT Frame Header Injection in Netty](https://agentprime.io/advisories/GHSA-3g8r-4pfx-jmfh.md)
  `GHSA-3g8r-4pfx-jmfh`, `CVE-2026-59920` · Maven `io.netty:netty-codec-stomp`: affected `>=4.2.0.Final, <4.2.16.Final || <4.1.136.Final`, fixed in `4.2.16.Final`, `4.1.136.Final` · CVSS 6.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Other injection
- [Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address](https://agentprime.io/advisories/GHSA-wh89-7897-x99h.md)
  `GHSA-wh89-7897-x99h`, `CVE-2026-59919` · Maven `io.netty:netty-codec-haproxy`: affected `>=4.2.0.Final, <4.2.16.Final || <4.1.136.Final`, fixed in `4.2.16.Final`, `4.1.136.Final` · CVSS 5.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Other injection
- [itsourcecode Hospital Management System prescription.php sql injection](https://agentprime.io/advisories/CVE-2026-16490.md)
  `CVE-2026-16490` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Other injection, SQL injection
- [SourceCodester Class and Exam Timetabling System edit_subjecta.php sql injection](https://agentprime.io/advisories/CVE-2026-16484.md)
  `CVE-2026-16484` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, SQL injection
- [Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-2p3q-h3hg-jcqq.md)
  `GHSA-2p3q-h3hg-jcqq`, `BIT-dotnet-2026-47303`, `BIT-dotnet-sdk-2026-47303`, `CVE-2026-47303` · NuGet `Microsoft.AspNetCore.Authentication.Negotiate`: affected `>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10`, fixed in `8.0.29`, `9.0.18`, `10.0.10` · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, Broken access control, CWE-302
- [zsadmin2025 ZS-Admin com.zs.sys.dept.controller.SysDeptController page OrderItem.desc sql injection](https://agentprime.io/advisories/CVE-2026-16449.md)
  `CVE-2026-16449` · CVE record: zsadmin2025 ZS-Admin · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, SQL injection
- [D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection](https://agentprime.io/advisories/CVE-2026-16448.md)
  `CVE-2026-16448` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, Command injection
- [itsourcecode Hospital Management System prescriptionorder.php sql injection](https://agentprime.io/advisories/CVE-2026-16334.md)
  `CVE-2026-16334` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, SQL injection
- [@astrojs/rss: XML Injection via Unescaped RSS Feed Fields](https://agentprime.io/advisories/GHSA-8j5q-mfj2-5q9q.md)
  `GHSA-8j5q-mfj2-5q9q`, `CVE-2026-59728` · npm `@astrojs/rss`: affected `>=1.0.0, <4.0.19`, fixed in `4.0.19` · CVSS 4.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Other injection
- [Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header](https://agentprime.io/advisories/CVE-2026-63771.md)
  `CVE-2026-63771` · CVE record: vrana adminer · CVSS 6.0 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Other injection
- [Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection](https://agentprime.io/advisories/CVE-2026-16252.md)
  `CVE-2026-16252` · CVE record: Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System · CVSS 6.9 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Other injection, SQL injection
- [itsourcecode Hospital Management System prescriptionorderreport.php sql injection](https://agentprime.io/advisories/CVE-2026-16244.md)
  `CVE-2026-16244` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Other injection, SQL injection

Newest: <https://agentprime.io/advisories/tag/injection.md>
Older: <https://agentprime.io/advisories/tag/injection.md?cursor=WyIyMDI2LTA3LTIwVDEyOjE1OjA5LjAwNjAwMFoiLCJDVkUtMjAyNi0xNjI0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=injection&cursor=WyIyMDI2LTA4LTA0VDAxOjE1OjA5Ljg4ODAwMFoiLCJDVkUtMjAyNi0xODcxOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/injection/?cursor=WyIyMDI2LTA4LTA0VDAxOjE1OjA5Ljg4ODAwMFoiLCJDVkUtMjAyNi0xODcxOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.