# Weak cryptography or TLS. Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Weak hashing algorithm in Redeight CMS](https://agentprime.io/advisories/CVE-2026-53692.md) `CVE-2026-53692` · CVE record: Redeight Redeight CMS · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS - [Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG](https://agentprime.io/advisories/CVE-2026-57082.md) `CVE-2026-57082` · CVE record: SANKO Net::BitTorrent · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS - [Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration](https://agentprime.io/advisories/CVE-2026-57997.md) `CVE-2026-57997` · CVE record: strapi strapi · CVSS 6.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Weak cryptography or TLS - [Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data](https://agentprime.io/advisories/CVE-2026-55844.md) `CVE-2026-55844` · CVE record: home-assistant core · CVSS 7.5 High · Not analysed yet · Published 29 Jun 2026 · Tags: Weak cryptography or TLS - [FrontAccounting < 2.4.20 SQL Injection via rep601.php](https://agentprime.io/advisories/CVE-2026-40522.md) `CVE-2026-40522` · CVE record: FrontAccounting FrontAccounting · CVSS 7.1 High · Not analysed yet · Published 29 Jun 2026 · Tags: SQL injection, Weak cryptography or TLS - [motionEye: Authentication possible via password hash](https://agentprime.io/advisories/GHSA-r3cw-c95m-wfh9.md) `GHSA-r3cw-c95m-wfh9`, `CVE-2026-46488`, `PYSEC-2026-428` · PyPI `motioneye`: affected `<0.44.0`, fixed in `0.44.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-256, CWE-836 - [rfc3161-client has insufficient verification for timestamp response signatures](https://agentprime.io/advisories/GHSA-6qhv-4h7r-2g9m.md) `GHSA-6qhv-4h7r-2g9m`, `CVE-2025-52556`, `PYSEC-2026-525` · PyPI `rfc3161-client`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Weak cryptography or TLS - [lack of validation for firmware update in Hitachi Virtual Storage](https://agentprime.io/advisories/CVE-2025-0824.md) `CVE-2025-0824` · CVE record: Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28 · CVSS 3.7 Low · Not analysed yet · Published 29 Jun 2026 · Tags: Weak cryptography or TLS - [SimStudioAI sim Password Protection deployment.ts weak hash](https://agentprime.io/advisories/CVE-2026-13510.md) `CVE-2026-13510` · CVE record: SimStudioAI sim · CVSS 6.3 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Weak cryptography or TLS - [skypilot-org skypilot User ID server.py username.encode weak hash](https://agentprime.io/advisories/CVE-2026-13482.md) `CVE-2026-13482` · CVE record: skypilot-org skypilot · CVSS 6.3 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Weak cryptography or TLS - [Relyra SAML SignatureValue not cryptographically verified -> authentication bypass](https://agentprime.io/advisories/GHSA-jv46-xfwm-36j7.md) `GHSA-jv46-xfwm-36j7`, `CVE-2026-49454` · Hex `relyra`: affected `>=1.0.0, <1.2.0`, fixed in `1.2.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS - [Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack](https://agentprime.io/advisories/CVE-2026-55069.md) `CVE-2026-55069` · CVE record: kestra-io kestra · CVSS 8.7 High · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability](https://agentprime.io/advisories/CVE-2024-23581.md) `CVE-2024-23581` · CVE record: HCLSoftware Traveler for Microsoft Outlook · CVSS 6.7 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [@sigstore/core has DSSE payloadType type-binding failure](https://agentprime.io/advisories/GHSA-jfc7-64v2-mr8c.md) `GHSA-jfc7-64v2-mr8c`, `CVE-2026-48758` · npm `@sigstore/core`: affected `<3.2.1`, fixed in `3.2.1` · CVSS 5.4 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption](https://agentprime.io/advisories/CVE-2026-47775.md) `CVE-2026-47775` · CVE record: envoyproxy envoy · CVSS 6.8 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Information disclosure, Weak cryptography or TLS - [The Apache Airflow FTP provider's \`FTPSHook.get_conn()\` created an \`ftplib.FTP_TLS\` connection but never called \`prot_p()\`, so although the control channel was TLS-protected the data channel was tr...](https://agentprime.io/advisories/GHSA-fgch-86x8-fv43.md) `GHSA-fgch-86x8-fv43`, `CVE-2026-49486`, `PYSEC-2026-238` · PyPI `apache-airflow-providers-ftp`: affected `<3.15.1`, fixed in `3.15.1` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-48934.md) `CVE-2026-48934` · CVE record: nodejs node · CVSS 4.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [Duplicate Advisory: Authentication bypass via jwt algorithm confusion](https://agentprime.io/advisories/GHSA-gqj5-2xp5-3qmp.md) `GHSA-gqj5-2xp5-3qmp` · Maven `org.keycloak:keycloak-services`: affected `<26.6.4`, fixed in `26.6.4` · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [Setracker2 Children's Smartwatch Ecosystem Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2026-9221.md) `CVE-2026-9221` · CVE record: Shenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App (Android) package com.tgelec.setracker · CVSS 8.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages](https://agentprime.io/advisories/CVE-2026-40941.md) `CVE-2026-40941` · CVE record: Cacti cacti · CVSS 7.1 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension](https://agentprime.io/advisories/GHSA-pjv4-3c63-699f.md) `GHSA-pjv4-3c63-699f`, `CVE-2026-42602`, `GO-2026-5544` · Go `github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension`: affected `>=0.124.0, <0.151.0`, fixed in `0.151.0` · CVSS 8.1 High · Not analysed yet · Published 25 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-208 - [golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions](https://agentprime.io/advisories/GHSA-45gg-vh54-h5m9.md) `GHSA-45gg-vh54-h5m9`, `CVE-2026-39828`, `GO-2026-5014` · Go `golang.org/x/crypto`: affected `<0.52.0`, fixed in `0.52.0` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS, CWE-281 - [Lemur: JWT verifier honors attacker-supplied alg, enabling ATO](https://agentprime.io/advisories/GHSA-r9gp-7f88-9r54.md) `GHSA-r9gp-7f88-9r54`, `CVE-2026-55165`, `PYSEC-2026-2589` · PyPI `lemur`: affected `<1.9.2`, fixed in `1.9.2` · CVSS 4.8 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [PKCS7_verify signer confusion allows forged signatures to be accepted](https://agentprime.io/advisories/CVE-2026-7511.md) `CVE-2026-7511` · CVE record: wolfSSL wolfSSL · CVSS 5.9 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined](https://agentprime.io/advisories/CVE-2026-7532.md) `CVE-2026-7532` · CVE record: wolfSSL wolfSSL · CVSS 5.7 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status](https://agentprime.io/advisories/CVE-2026-10098.md) `CVE-2026-10098` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [PKCS#12 MAC verification uses attacker-controlled comparison length](https://agentprime.io/advisories/CVE-2026-6329.md) `CVE-2026-6329` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [ML-KEM ARM64 NEON ciphertext comparison only compares half of the input](https://agentprime.io/advisories/CVE-2026-6330.md) `CVE-2026-6330` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [HMAC zero-length tag forgery in EVP_DigestVerifyFinal](https://agentprime.io/advisories/CVE-2026-6331.md) `CVE-2026-6331` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Continued acceptance of SHA-1/MD5 digests in certificate processing](https://agentprime.io/advisories/CVE-2026-6412.md) `CVE-2026-6412` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [CRL critical extension bypass in ParseCRL_Extensions](https://agentprime.io/advisories/CVE-2026-6450.md) `CVE-2026-6450` · CVE record: wolfSSL wolfSSL · CVSS 1.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [X.509 name constraint bypass via Subject CN treated as a DNS name](https://agentprime.io/advisories/CVE-2026-6731.md) `CVE-2026-6731` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Wildcard DNS SAN bypasses CA name-constraint checks](https://agentprime.io/advisories/CVE-2026-10592.md) `CVE-2026-10592` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring](https://agentprime.io/advisories/CVE-2026-11310.md) `CVE-2026-11310` · CVE record: wolfSSL wolfSSL · CVSS 8.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation](https://agentprime.io/advisories/CVE-2026-55960.md) `CVE-2026-55960` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)](https://agentprime.io/advisories/CVE-2026-55964.md) `CVE-2026-55964` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing](https://agentprime.io/advisories/GHSA-386j-6m86-78f9.md) `GHSA-386j-6m86-78f9`, `CVE-2026-46560` · Maven `org.openidentityplatform.openam:openam-radius`: affected `<16.1.1`, fixed in `16.1.1` · CVSS 7.5 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()](https://agentprime.io/advisories/CVE-2026-11999.md) `CVE-2026-11999` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer](https://agentprime.io/advisories/CVE-2026-55961.md) `CVE-2026-55961` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Partial-chain verification accepts untrusted intermediate as trust anchor](https://agentprime.io/advisories/CVE-2026-6091.md) `CVE-2026-6091` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in Dell Display and Peripheral Manager](https://agentprime.io/advisories/CVE-2026-46734.md) `CVE-2026-46734` · CVE record: Dell Display and Peripheral Manager · CVSS 7.3 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-9779.md) `CVE-2026-9779` · CVE record: ATEN Unizon · CVSS 7.2 High · Not analysed yet · Published 24 Jun 2026 · Tags: Weak cryptography or TLS - [Rocket.Chat: SAML signature validation skipped when IdP certificate field is empty](https://agentprime.io/advisories/CVE-2026-46423.md) `CVE-2026-46423` · CVE record: RocketChat Rocket.Chat · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Weak cryptography or TLS - [Mastodon: LD-Signature Bypass via JSON-LD Named-Graph Restructuring](https://agentprime.io/advisories/CVE-2026-46349.md) `CVE-2026-46349` · CVE record: mastodon mastodon · CVSS 5.3 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Weak cryptography or TLS - [Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation](https://agentprime.io/advisories/GHSA-jwhr-h7pc-3974.md) `GHSA-jwhr-h7pc-3974`, `CVE-2026-57289` · Maven `io.jenkins.plugins:bitbucket-push-and-pull-request`: affected `<3.3.9`, fixed in `3.3.9` · CVSS 4.8 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Weak cryptography or TLS - [phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing](https://agentprime.io/advisories/GHSA-58fg-62fg-3fcj.md) `GHSA-58fg-62fg-3fcj`, `CVE-2026-48488`, `PKSA-p1ky-vdyf-6r6j`, `PKSA-rr72-yd9q-kc5n` · Packagist `phpmyfaq/phpmyfaq` and 1 more: affected `<4.1.4`, fixed in `4.1.4` · CVSS 2.7 Low · Not analysed yet · Published 23 Jun 2026 · Tags: Weak cryptography or TLS - [motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)](https://agentprime.io/advisories/GHSA-qxvg-h7q2-hcxh.md) `GHSA-qxvg-h7q2-hcxh` · PyPI `motioneye`: affected `<0.44.0`, fixed in `0.44.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2026 · Tags: Path traversal, Privilege escalation, Authentication bypass, Weak cryptography or TLS - [Daytona: Git credential leak via git clone with TLS verification disabled](https://agentprime.io/advisories/CVE-2026-54323.md) `CVE-2026-54323` · CVE record: daytonaio daytona · CVSS 5.9 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Weak cryptography or TLS - [HCL Connections is vulnerable to broken access control](https://agentprime.io/advisories/CVE-2025-15619.md) `CVE-2025-15619` · CVE record: HCLSoftware Connections · CVSS 3.5 Low · Not analysed yet · Published 23 Jun 2026 · Tags: Broken access control, Weak cryptography or TLS - [Account Takeover via Predictable SSO Ticket Generation](https://agentprime.io/advisories/CVE-2026-11374.md) `CVE-2026-11374` · CVE record: zohocorp manageengine_adselfservice_plus and 3 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-340 - [Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter](https://agentprime.io/advisories/CVE-2026-9733.md) `CVE-2026-9733` · CVE record: HAYAJO Mojolicious::Plugin::Web::Auth::OAuth2 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2026 · Tags: Weak cryptography or TLS, CWE-340 - [Cleartext transmission of sensitive information in Yokogawa Electric Corporation FAST/TOOLS and others](https://agentprime.io/advisories/CVE-2026-11833.md) `CVE-2026-11833` · CVE record: Yokogawa Electric Corporation FAST/TOOLS and 1 more · CVSS 8.2 High · Not analysed yet · Published 23 Jun 2026 · Tags: Weak cryptography or TLS - [Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.](https://agentprime.io/advisories/CVE-2025-2669.md) `CVE-2025-2669` · CVE record: IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data · CVSS 6.0 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Weak cryptography or TLS - [Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft](https://agentprime.io/advisories/CVE-2026-54100.md) `CVE-2026-54100` · CVE record: Red Hat Red Hat OpenShift for Windows Containers 10.19 and 4 more · CVSS 8.3 High · Not analysed yet · Published 22 Jun 2026 · Tags: Weak cryptography or TLS - [@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing](https://agentprime.io/advisories/GHSA-h5x8-xp6m-x6q4.md) `GHSA-h5x8-xp6m-x6q4`, `CVE-2026-58200` · npm `@jhb.software/payload-cloudinary-plugin`: affected `>=0.3.0, <0.4.0`, fixed in `0.4.0` · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS - [CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality](https://agentprime.io/advisories/GHSA-2288-8h3r-cqgg.md) `GHSA-2288-8h3r-cqgg`, `CVE-2026-54784` · NuGet `CoreWCF.Primitives`: affected `>=1.9.0, <1.9.1`, fixed in `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-523 - [CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages](https://agentprime.io/advisories/GHSA-gqv6-pwcg-87r8.md) `GHSA-gqv6-pwcg-87r8`, `CVE-2026-54783` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-345 - [CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation](https://agentprime.io/advisories/GHSA-xjr9-gg9q-jx3v.md) `GHSA-xjr9-gg9q-jx3v`, `CVE-2026-54782` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS - [CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass](https://agentprime.io/advisories/GHSA-4v55-cpmv-3vcm.md) `GHSA-4v55-cpmv-3vcm`, `CVE-2026-54780` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 3.7 Low · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-757 - [CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate](https://agentprime.io/advisories/GHSA-rpj7-hr7h-w6p9.md) `GHSA-rpj7-hr7h-w6p9`, `CVE-2026-54774` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-345 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .