# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-95525.md)
  `CVE-2026-95525` · CVE record: weDevs WP User Frontend · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Plex Media Server arbitrary file write](https://agentprime.io/advisories/CVE-2026-96656.md)
  `CVE-2026-96656` · CVE record: Plex Media Server · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Plex Media Server path traversal](https://agentprime.io/advisories/CVE-2026-96651.md)
  `CVE-2026-96651` · CVE record: Plex Media Server · CVSS 7.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Flatpak: flatpak: arbitrary write in host context via flatpak build-init](https://agentprime.io/advisories/CVE-2026-96276.md)
  `CVE-2026-96276` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Flatpak: flatpak: arbitrary write access as root via extra-data extraction](https://agentprime.io/advisories/CVE-2026-96275.md)
  `CVE-2026-96275` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-91797.md)
  `CVE-2026-91797` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 7.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-91801.md)
  `CVE-2026-91801` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 7.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Apache BuildStream: tar source extraction escape](https://agentprime.io/advisories/CVE-2026-82331.md)
  `CVE-2026-82331` · CVE record: Apache Software Foundation Apache BuildStream · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Mint Workbench I Path traversal Vulnerability](https://agentprime.io/advisories/CVE-2026-19438.md)
  `CVE-2026-19438` · CVE record: ABB Mint Workbench I · CVSS 8.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint.](https://agentprime.io/advisories/CVE-2026-79306.md)
  `CVE-2026-79306` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint.](https://agentprime.io/advisories/CVE-2026-79304.md)
  `CVE-2026-79304` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18169.md)
  `CVE-2026-18169` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18133.md)
  `CVE-2026-18133` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18114.md)
  `CVE-2026-18114` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join](https://agentprime.io/advisories/GHSA-9vm9-pqxx-x83v.md)
  `GHSA-9vm9-pqxx-x83v`, `CVE-2026-62369`, `GO-2026-6563` · Go `github.com/kubeedge/kubeedge`: affected `>=1.16.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1`, fixed in `1.21.2`, `1.22.2`, `1.23.1` · CVSS 8.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()](https://agentprime.io/advisories/GHSA-93xw-j965-9mx3.md)
  `GHSA-93xw-j965-9mx3`, `CVE-2026-77258`, `PYSEC-2026-4088` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters](https://agentprime.io/advisories/GHSA-f6pj-qv47-g96w.md)
  `GHSA-f6pj-qv47-g96w`, `CVE-2026-77247`, `PYSEC-2026-4092` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)](https://agentprime.io/advisories/GHSA-6vmq-24h2-pj7j.md)
  `GHSA-6vmq-24h2-pj7j`, `CVE-2026-77271`, `PYSEC-2026-4087` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Code injection
- [MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)](https://agentprime.io/advisories/GHSA-p6hp-93wp-fh6p.md)
  `GHSA-p6hp-93wp-fh6p`, `CVE-2026-77262`, `PYSEC-2026-4099` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.6 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials](https://agentprime.io/advisories/GHSA-6cr4-ccf3-x7h4.md)
  `GHSA-6cr4-ccf3-x7h4`, `CVE-2026-77259`, `PYSEC-2026-4086` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Information disclosure
- [MCP Atlassian: Arbitrary File Read via Upload Attachment Tools](https://agentprime.io/advisories/GHSA-f26r-j276-ggg4.md)
  `GHSA-f26r-j276-ggg4`, `CVE-2026-77270`, `PYSEC-2026-4090` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call](https://agentprime.io/advisories/GHSA-mfv2-4wvm-9pgp.md)
  `GHSA-mfv2-4wvm-9pgp`, `CVE-2026-77266`, `PYSEC-2026-4097` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)](https://agentprime.io/advisories/GHSA-h7wj-5v37-59r2.md)
  `GHSA-h7wj-5v37-59r2`, `CVE-2026-77269`, `PYSEC-2026-4095` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)](https://agentprime.io/advisories/GHSA-f4p7-qx46-wc5j.md)
  `GHSA-f4p7-qx46-wc5j`, `CVE-2026-77260`, `PYSEC-2026-4091` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths](https://agentprime.io/advisories/GHSA-mrq8-fv7v-hhjg.md)
  `GHSA-mrq8-fv7v-hhjg`, `CVE-2026-77257`, `PYSEC-2026-4098` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue](https://agentprime.io/advisories/GHSA-2xj6-xx86-cwwc.md)
  `GHSA-2xj6-xx86-cwwc`, `CVE-2026-77255`, `PYSEC-2026-4080` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.6 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, CWE-441
- [MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files](https://agentprime.io/advisories/GHSA-vc25-24vv-fxxm.md)
  `GHSA-vc25-24vv-fxxm`, `CVE-2026-77253`, `PYSEC-2026-4101` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path](https://agentprime.io/advisories/GHSA-wv8v-v4c5-v75j.md)
  `GHSA-wv8v-v4c5-v75j`, `CVE-2026-77246`, `PYSEC-2026-4104` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.4 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Information disclosure, CWE-441
- [MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport](https://agentprime.io/advisories/GHSA-cc5h-2pwp-pvcc.md)
  `GHSA-cc5h-2pwp-pvcc`, `CVE-2026-77248`, `PYSEC-2026-4089` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.6 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Authentication bypass
- [MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers](https://agentprime.io/advisories/GHSA-7952-gx68-cjqr.md)
  `GHSA-7952-gx68-cjqr`, `CVE-2026-65829`, `PYSEC-2026-4108` · Maven `net.sf.mpxj:mpxj` and 6 more: affected `>=7.3.0, <16.5.0`, fixed in `16.5.0` · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)](https://agentprime.io/advisories/CVE-2026-34689.md)
  `CVE-2026-34689` · CVE record: Adobe Adobe Connect and 1 more · CVSS 8.6 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE](https://agentprime.io/advisories/CVE-2026-83603.md)
  `CVE-2026-83603` · CVE record: netdata netdata · CVSS 8.4 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Insecure deserialization
- [Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass](https://agentprime.io/advisories/CVE-2026-80156.md)
  `CVE-2026-80156` · CVE record: LANTRONIX SLC8000 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation](https://agentprime.io/advisories/CVE-2026-80155.md)
  `CVE-2026-80155` · CVE record: LANTRONIX SLC8000 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Vector: Arbitrary file write in the file sink via templated path (path traversal).](https://agentprime.io/advisories/CVE-2026-77621.md)
  `CVE-2026-77621` · CVE record: vectordotdev vector · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MISP Path Traversal via Organization Name in Org-Statistics Logo Check](https://agentprime.io/advisories/CVE-2026-95701.md)
  `CVE-2026-95701` · CVE record: MISP MISP · CVSS 5.1 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory](https://agentprime.io/advisories/GHSA-jjhp-8crj-mppq.md)
  `GHSA-jjhp-8crj-mppq`, `CVE-2026-61647` · npm `@roomi-fields/notebooklm-mcp`: affected `>=1.6.0, <2.0.3`, fixed in `2.0.3` · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name](https://agentprime.io/advisories/CVE-2026-95698.md)
  `CVE-2026-95698` · CVE record: MISP MISP · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MISP Information Disclosure via Forged Upload Path](https://agentprime.io/advisories/CVE-2026-95693.md)
  `CVE-2026-95693` · CVE record: MISP MISP · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Information disclosure
- [External control of a file path in NVIDIA Infrastructure Controller](https://agentprime.io/advisories/CVE-2026-65125.md)
  `CVE-2026-65125` · CVE record: NVIDIA Infrastructure Controller · CVSS 6.6 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials](https://agentprime.io/advisories/CVE-2026-95667.md)
  `CVE-2026-95667` · CVE record: MISP MISP · CVSS 6.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Broken access control
- [Directory Traversal and File upload allows execution of arbitrary script on the Management Server](https://agentprime.io/advisories/CVE-2026-93616.md)
  `CVE-2026-93616` · CVE record: checkpoint Quantum Security Management · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.92 · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal](https://agentprime.io/advisories/CVE-2026-95273.md)
  `CVE-2026-95273` · CVE record: dgtlmoon changedetection.io · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal](https://agentprime.io/advisories/CVE-2026-95272.md)
  `CVE-2026-95272` · CVE record: dgtlmoon changedetection.io · CVSS 6.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Product Feed Manager for WooCommerce <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter](https://agentprime.io/advisories/CVE-2026-15095.md)
  `CVE-2026-15095` · CVE record: wahid0003 Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels · CVSS 4.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read](https://agentprime.io/advisories/CVE-2025-1280.md)
  `CVE-2025-1280` · CVE record: SeaTheme BM Content Builder · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion](https://agentprime.io/advisories/CVE-2025-1281.md)
  `CVE-2025-1281` · CVE record: SeaTheme BM Content Builder · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler](https://agentprime.io/advisories/CVE-2026-93712.md)
  `CVE-2026-93712` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.](https://agentprime.io/advisories/CVE-2026-88624.md)
  `CVE-2026-88624` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e.](https://agentprime.io/advisories/CVE-2026-88344.md)
  `CVE-2026-88344` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash](https://agentprime.io/advisories/CVE-2026-59816.md)
  `CVE-2026-59816` · CVE record: laurent22 joplin · CVSS 4.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal
- [Joplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory](https://agentprime.io/advisories/CVE-2026-49453.md)
  `CVE-2026-49453` · CVE record: laurent22 joplin · CVSS 7.0 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal, CWE-20
- [Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database](https://agentprime.io/advisories/CVE-2026-52835.md)
  `CVE-2026-52835` · CVE record: Tautulli Tautulli · CVSS 7.0 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal, Unrestricted file upload
- [draw.io: Path traversal in ExportProxyServlet allows access to arbitrary backend endpoints](https://agentprime.io/advisories/CVE-2026-63416.md)
  `CVE-2026-63416` · CVE record: jgraph drawio · CVSS 3.7 Low · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal
- [Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation](https://agentprime.io/advisories/CVE-2026-53940.md)
  `CVE-2026-53940` · CVE record: conda conda · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal
- [mport trusts environment-controlled temporary directories in privileged metadata extraction](https://agentprime.io/advisories/CVE-2026-54584.md)
  `CVE-2026-54584` · CVE record: MidnightBSD mport · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal, CWE-377
- [MISP Arbitrary Local File Read and SSRF via MISP Export Upload](https://agentprime.io/advisories/CVE-2026-94401.md)
  `CVE-2026-94401` · CVE record: MISP MISP · CVSS 8.3 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Cri-o: cri-o: insufficient validation during container checkpoint restore](https://agentprime.io/advisories/CVE-2026-15801.md)
  `CVE-2026-15801` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 8.0 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal
- [nvm alias resolution follows \`..\` and discloses files outside $NVM_DIR/alias](https://agentprime.io/advisories/CVE-2026-94185.md)
  `CVE-2026-94185` · CVE record: nvm-sh nvm · CVSS 6.7 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal, Information disclosure
- [web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.py).](https://agentprime.io/advisories/CVE-2026-79318.md)
  `CVE-2026-79318` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTA5LTIxVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi03OTMxOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTA5LTIzVDIwOjA1OjA0LjkyMzAwMFoiLCJDVkUtMjAyNi02NzIyNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTA5LTIzVDIwOjA1OjA0LjkyMzAwMFoiLCJDVkUtMjAyNi02NzIyNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.