# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)](https://agentprime.io/advisories/CVE-2025-64787.md)
  `CVE-2025-64787` · CVE record: Adobe Acrobat Reader · CVSS 3.3 Low · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Improper signature verification in Fortinet FortiSwitchManager and others](https://agentprime.io/advisories/CVE-2025-59718.md)
  `CVE-2025-59718` · CVE record: Fortinet FortiSwitchManager and 2 more · CVSS 9.1 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.68 · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Improper signature verification in Fortinet FortiWeb](https://agentprime.io/advisories/CVE-2025-59719.md)
  `CVE-2025-59719` · CVE record: Fortinet FortiWeb · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.27 · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Improper signature verification in Ivanti Endpoint Manager](https://agentprime.io/advisories/CVE-2025-13662.md)
  `CVE-2025-13662` · CVE record: Ivanti Endpoint Manager · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Siemens COMOS V10.6 and others](https://agentprime.io/advisories/CVE-2025-40801.md)
  `CVE-2025-40801` · CVE record: Siemens COMOS V10.6 and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Siemens COMOS V10.6 and others](https://agentprime.io/advisories/CVE-2025-40800.md)
  `CVE-2025-40800` · CVE record: Siemens COMOS V10.6 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [Weak/Predictable root Password](https://agentprime.io/advisories/CVE-2025-41692.md)
  `CVE-2025-41692` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS
- [WBCE CMS has Weak Random Number Generator in Password Generation Function](https://agentprime.io/advisories/CVE-2025-67504.md)
  `CVE-2025-67504` · CVE record: WBCE WBCE_CMS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS, CWE-331
- [Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation](https://agentprime.io/advisories/GHSA-x4h9-gwv3-r4m4.md)
  `GHSA-x4h9-gwv3-r4m4`, `CVE-2025-66568` · RubyGems `ruby-saml`: affected `<1.18.0`, fixed in `1.18.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Dec 2025 · Tags: Weak cryptography or TLS
- [Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)](https://agentprime.io/advisories/GHSA-9v8j-x534-2fx3.md)
  `GHSA-9v8j-x534-2fx3`, `CVE-2025-66567` · RubyGems `ruby-saml`: affected `<1.18.0`, fixed in `1.18.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Dec 2025 · Tags: Weak cryptography or TLS
- [Altcha Proof-of-Work obfuscation mode cryptanalytic break](https://agentprime.io/advisories/GHSA-mpmc-qchh-r9q8.md)
  `GHSA-mpmc-qchh-r9q8`, `CVE-2025-65849` · npm `altcha`: affected `>=0.8.0, <=2.2.4`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Dec 2025 · Tags: Weak cryptography or TLS
- [Traefik Inverted TLS Verification Logic in ingress-nginx Provider](https://agentprime.io/advisories/GHSA-7vww-mvcr-x6vj.md)
  `GHSA-7vww-mvcr-x6vj`, `CVE-2025-66491`, `GO-2025-4205` · Go `github.com/traefik/traefik/v3`: affected `>=3.5.0, <3.6.3`, fixed in `3.6.3` · CVSS 5.9 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Weak cryptography or TLS
- [Nextcloud Calendar app used predictable proposal participant tokens](https://agentprime.io/advisories/CVE-2025-66511.md)
  `CVE-2025-66511` · CVE record: nextcloud security-advisories · CVSS 4.8 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Weak cryptography or TLS
- [Solstice Pod API Session Key Extraction via API Endpoint](https://agentprime.io/advisories/CVE-2025-66573.md)
  `CVE-2025-66573` · CVE record: mersive Solstice Pod API · CVSS 6.9 Medium · Not analysed yet · Published 4 Dec 2025 · Tags: Weak cryptography or TLS
- [libcrux incorrectly calculates on aarch64](https://agentprime.io/advisories/GHSA-2cgv-28vr-rv6j.md)
  `GHSA-2cgv-28vr-rv6j`, `RUSTSEC-2025-0133` · crates.io `libcrux-intrinsics` and 2 more: affected `>=0.0.3, <0.0.4`, fixed in `0.0.4` · CVSS 4.0, no score published · Not analysed yet · Published 4 Dec 2025 · Tags: Information disclosure, Weak cryptography or TLS
- [auth0/node-jws Improperly Verifies HMAC Signature](https://agentprime.io/advisories/GHSA-869p-cjfg-cm3x.md)
  `GHSA-869p-cjfg-cm3x`, `CVE-2025-65945` · npm `jws`: affected `<3.2.3 || >=4.0.0, <4.0.1`, fixed in `3.2.3`, `4.0.1` · CVSS 7.5 High · Not analysed yet · Published 4 Dec 2025 · Tags: Weak cryptography or TLS
- [Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext.](https://agentprime.io/advisories/CVE-2025-63364.md)
  `CVE-2025-63364` · CVE record · CVSS 7.5 High · Not analysed yet · Published 4 Dec 2025 · Tags: Weak cryptography or TLS
- [gokey allows secret recovery from a seed file without the master password in github.com/cloudflare/gokey](https://agentprime.io/advisories/GHSA-69jw-4jj8-fcxm.md)
  `GHSA-69jw-4jj8-fcxm`, `CVE-2025-13353`, `GO-2025-4174` · Go `github.com/cloudflare/gokey`: affected `<0.2.0`, fixed in `0.2.0` · CVSS 7.1 High · Not analysed yet · Published 2 Dec 2025 · Tags: Weak cryptography or TLS
- [Sprecher Automation: SPRECON-E series prone to weak encryption of update files](https://agentprime.io/advisories/CVE-2025-41743.md)
  `CVE-2025-41743` · CVE record: Sprecher Automation SPRECON-E-C and 2 more · CVSS 4.0 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Socomec DIRIS Digiware M-70](https://agentprime.io/advisories/CVE-2024-48894.md)
  `CVE-2024-48894` · CVE record: Socomec DIRIS Digiware M-70 · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: Weak cryptography or TLS
- [An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack.](https://agentprime.io/advisories/CVE-2024-56089.md)
  `CVE-2024-56089` · CVE record · CVSS 7.5 High · Not analysed yet · Published 1 Dec 2025 · Tags: Weak cryptography or TLS
- [Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support.](https://agentprime.io/advisories/CVE-2024-32384.md)
  `CVE-2024-32384` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: Weak cryptography or TLS
- [XML-Sig prior to 0.68 for Perl improperly validates XML without signatures](https://agentprime.io/advisories/CVE-2025-40934.md)
  `CVE-2025-40934` · CVE record: TIMLEGGE XML::Sig · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Nov 2025 · Tags: Weak cryptography or TLS
- [Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions](https://agentprime.io/advisories/GHSA-wmjr-v86c-m9jj.md)
  `GHSA-wmjr-v86c-m9jj`, `CVE-2025-71402` · npm `better-auth`: affected `>=1.3.34, <1.4.0`, fixed in `1.4.0` · CVSS 2.0 Low · Not analysed yet · Published 26 Nov 2025 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-345
- [Apache Druid’s Kerberos authenticator uses a weak fallback secret](https://agentprime.io/advisories/GHSA-w88f-4875-99c8.md)
  `GHSA-w88f-4875-99c8`, `CVE-2025-59390` · Maven `org.apache.druid:druid`: affected `<35.0.0`, fixed in `35.0.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Nov 2025 · Tags: Weak cryptography or TLS
- [cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures](https://agentprime.io/advisories/GHSA-8frv-q972-9rq5.md)
  `GHSA-8frv-q972-9rq5`, `CVE-2025-66017`, `RUSTSEC-2025-0127`, `RUSTSEC-2025-0128` · crates.io `cggmp21` and 1 more: affected `<=0.6.3`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 25 Nov 2025 · Tags: Weak cryptography or TLS
- [cggmp21 has a missing check in the ZK proof used in CGGMP21](https://agentprime.io/advisories/GHSA-m95p-425x-x889.md)
  `GHSA-m95p-425x-x889`, `CVE-2025-66016`, `RUSTSEC-2025-0129`, `RUSTSEC-2025-0130` · crates.io `cggmp21` and 1 more: affected `<0.6.3`, fixed in `0.6.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Weak cryptography or TLS, CWE-345
- [Insufficiently random values in ASUS Router](https://agentprime.io/advisories/CVE-2025-59371.md)
  `CVE-2025-59371` · CVE record: ASUS Router · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server](https://agentprime.io/advisories/CVE-2025-12893.md)
  `CVE-2025-12893` · CVE record: MongoDB Inc. MongoDB Server · CVSS 2.3 Low · Not analysed yet · Published 25 Nov 2025 · Tags: Weak cryptography or TLS
- [Inside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output Leakage](https://agentprime.io/advisories/CVE-2025-65951.md)
  `CVE-2025-65951` · CVE record: mescuwa entropy-derby · CVSS 8.7 High · Not analysed yet · Published 25 Nov 2025 · Tags: Information disclosure, Weak cryptography or TLS
- [IBM Concert Information Disclosure](https://agentprime.io/advisories/CVE-2025-36150.md)
  `CVE-2025-36150` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 24 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in GL-Inet GL-AXT1800](https://agentprime.io/advisories/CVE-2025-44018.md)
  `CVE-2025-44018` · CVE record: GL-Inet GL-AXT1800 · CVSS 8.3 High · Not analysed yet · Published 24 Nov 2025 · Tags: Weak cryptography or TLS
- [Forward Secrecy Violation in WolfSSL TLS 1.3](https://agentprime.io/advisories/CVE-2025-11935.md)
  `CVE-2025-11935` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: Weak cryptography or TLS
- [RNP 0.18.0 Vulnerable PKESK session keys](https://agentprime.io/advisories/CVE-2025-13470.md)
  `CVE-2025-13470` · CVE record: Ribose RNP · CVSS 7.7 High · Not analysed yet · Published 21 Nov 2025 · Tags: Weak cryptography or TLS
- [IBM Concert Software Information Disclosure](https://agentprime.io/advisories/CVE-2025-36161.md)
  `CVE-2025-36161` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 20 Nov 2025 · Tags: Weak cryptography or TLS
- [GoSign Desktop < 2.4.1 Insecure Update Mechanism RCE](https://agentprime.io/advisories/CVE-2025-34324.md)
  `CVE-2025-34324` · CVE record: Tinexta InfoCert S.p.A. GoSign Desktop · CVSS 7.0 High · Not analysed yet · Published 18 Nov 2025 · Tags: Weak cryptography or TLS
- [Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves in github.com/evervault/evervault-go](https://agentprime.io/advisories/GHSA-88h9-77c7-p6w4.md)
  `GHSA-88h9-77c7-p6w4`, `CVE-2025-64186`, `GO-2025-4112` · Go `github.com/evervault/evervault-go`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 8.7 High · Not analysed yet · Published 17 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in KDDI CORPORATION 'デジラアプリ' App for iOS](https://agentprime.io/advisories/CVE-2025-60022.md)
  `CVE-2025-60022` · CVE record: KDDI CORPORATION 'デジラアプリ' App for iOS · CVSS 2.3 Low · Not analysed yet · Published 17 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Tinexta Infocert GoSign Desktop](https://agentprime.io/advisories/CVE-2025-65083.md)
  `CVE-2025-65083` · CVE record: Tinexta Infocert GoSign Desktop · CVSS 3.2 Low · Not analysed yet · Published 17 Nov 2025 · Tags: Weak cryptography or TLS
- [Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmware = 4.7.x) were…](https://agentprime.io/advisories/CVE-2025-63292.md)
  `CVE-2025-63292` · CVE record · CVSS 3.5 Low · Not analysed yet · Published 17 Nov 2025 · Tags: Weak cryptography or TLS
- [AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2025-9317.md)
  `CVE-2025-9317` · CVE record: AVEVA Edge · CVSS 8.3 High · Not analysed yet · Published 14 Nov 2025 · Tags: Weak cryptography or TLS
- [General Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2025-62765.md)
  `CVE-2025-62765` · CVE record: General Industrial Controls Lynx+ Gateway · CVSS 8.7 High · Not analysed yet · Published 14 Nov 2025 · Tags: Weak cryptography or TLS
- [A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.](https://agentprime.io/advisories/CVE-2025-54340.md)
  `CVE-2025-54340` · CVE record · CVSS 4.1 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: Weak cryptography or TLS
- [pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification](https://agentprime.io/advisories/GHSA-g4r8-3qmh-pmch.md)
  `GHSA-g4r8-3qmh-pmch`, `CVE-2025-12765`, `PYSEC-2026-1773` · PyPI `pgadmin4`: affected `<9.10`, fixed in `9.10` · CVSS 7.5 High · Not analysed yet · Published 13 Nov 2025 · Tags: Weak cryptography or TLS
- [Zoom Workplace Clients - Improper Certificate Validation](https://agentprime.io/advisories/CVE-2025-30669.md)
  `CVE-2025-30669` · CVE record: Zoom Communications Inc. Zoom Workplace Clients · CVSS 4.8 Medium · Not analysed yet · Published 13 Nov 2025 · Tags: Weak cryptography or TLS
- [Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic Signature](https://agentprime.io/advisories/CVE-2025-64740.md)
  `CVE-2025-64740` · CVE record: Zoom Communications Inc. Zoom Workplace VDI Client · CVSS 7.5 High · Not analysed yet · Published 13 Nov 2025 · Tags: Weak cryptography or TLS
- [DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The ...](https://agentprime.io/advisories/GHSA-vmp8-hg63-v2hp.md)
  `GHSA-vmp8-hg63-v2hp`, `CVE-2025-64429`, `PYSEC-2025-112` · PyPI `duckdb`: affected `>=1.4.0, <1.4.2`, fixed in `1.4.2` · CVSS 6.9 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Lenovo Scanner Pro](https://agentprime.io/advisories/CVE-2025-12047.md)
  `CVE-2025-12047` · CVE record: Lenovo Scanner Pro · CVSS 6.0 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Lenovo App Store and others](https://agentprime.io/advisories/CVE-2025-10495.md)
  `CVE-2025-10495` · CVE record: Lenovo App Store and 3 more · CVSS 7.7 High · Not analysed yet · Published 12 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Siemens Solid Edge SE2025](https://agentprime.io/advisories/CVE-2025-40744.md)
  `CVE-2025-40744` · CVE record: Siemens Solid Edge SE2025 · CVSS 8.7 High · Not analysed yet · Published 11 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300](https://agentprime.io/advisories/CVE-2025-12943.md)
  `CVE-2025-12943` · CVE record: NETGEAR RAX30 and 1 more · CVSS 5.2 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Weak cryptography or TLS
- [Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Genera…](https://agentprime.io/advisories/CVE-2025-12787.md)
  `CVE-2025-12787` · CVE record: themefic Hydra Booking — Appointment Scheduling & Booking Calendar · CVSS 5.3 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Dell PowerScale OneFS](https://agentprime.io/advisories/CVE-2025-43723.md)
  `CVE-2025-43723` · CVE record: Dell PowerScale OneFS · CVSS 5.9 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper signature verification in JetBrains ReSharper](https://agentprime.io/advisories/CVE-2025-64456.md)
  `CVE-2025-64456` · CVE record: JetBrains ReSharper · CVSS 8.4 High · Not analysed yet · Published 10 Nov 2025 · Tags: Weak cryptography or TLS
- [Improper certificate validation in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-64685.md)
  `CVE-2025-64685` · CVE record: JetBrains YouTrack · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2025 · Tags: Weak cryptography or TLS
- [Jumo: Insufficient entropy in PRNG may lead to root access](https://agentprime.io/advisories/CVE-2025-41731.md)
  `CVE-2025-41731` · CVE record: Jumo variTRON300 and 2 more · CVSS 7.4 High · Not analysed yet · Published 10 Nov 2025 · Tags: Weak cryptography or TLS
- [Weak password hashing in BUFFALO INC. WSR-1800AX4 and others](https://agentprime.io/advisories/CVE-2025-46413.md)
  `CVE-2025-46413` · CVE record: BUFFALO INC. WSR-1800AX4 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Weak cryptography or TLS
- [KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer](https://agentprime.io/advisories/GHSA-38jw-g2qx-4286.md)
  `GHSA-38jw-g2qx-4286`, `CVE-2025-64432`, `GO-2025-4103` · Go `kubevirt.io/kubevirt`: affected `<1.5.3 || >=1.6.0-alpha.0, <1.6.1 || >=1.7.0-alpha.0, <1.7.0-rc.0`, fixed in `1.5.3`, `1.6.1`, `1.7.0-rc.0` · CVSS 4.7 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: Authentication bypass, Weak cryptography or TLS
- [HCL DevOps Loop is susceptible to an improper authentication vulnerability](https://agentprime.io/advisories/CVE-2025-55278.md)
  `CVE-2025-55278` · CVE record: HCL Software DevOps Loop · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2025 · Tags: Weak cryptography or TLS, Authentication bypass
- [Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.](https://agentprime.io/advisories/CVE-2025-56231.md)
  `CVE-2025-56231` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2025 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI1LTExLTA1VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNS01NjIzMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI1LTEyLTA5VDIwOjIxOjA0LjM4ODAwMFoiLCJDVkUtMjAyNS02NDc4NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI1LTEyLTA5VDIwOjIxOjA0LjM4ODAwMFoiLCJDVkUtMjAyNS02NDc4NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.