# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [ePA 3.x Integration: TLS Certificate Verification Universally Disabled](https://agentprime.io/advisories/CVE-2026-50578.md)
  `CVE-2026-50578` · CVE record: fbeta-GmbH ePA3-Service-OpenSource · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS
- [ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust](https://agentprime.io/advisories/CVE-2026-52723.md)
  `CVE-2026-52723` · CVE record: fbeta-GmbH ePA3-Service-OpenSource · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS
- [RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM](https://agentprime.io/advisories/GHSA-5m9f-rphj-c435.md)
  `GHSA-5m9f-rphj-c435`, `CVE-2026-63336` · Maven `com.rabbitmq:amqp-client`: affected `<5.33.0`, fixed in `5.33.0` · CVSS 5.1 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS
- [\`HTTPPasswordMgr\` can send saved HTTPS credentials via HTTP because of incorrect scheme matching](https://agentprime.io/advisories/CVE-2026-15806.md)
  `CVE-2026-15806` · CVE record: Python Software Foundation CPython · CVSS 6.0 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Mastodon: Unwanted deactivation of SSL/TLS certificate verification](https://agentprime.io/advisories/CVE-2026-59825.md)
  `CVE-2026-59825` · CVE record: mastodon mastodon · CVSS 7.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS
- [An issue was discovered in openHiTLS 0.2.0 through 0.3.2.](https://agentprime.io/advisories/CVE-2026-57826.md)
  `CVE-2026-57826` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS
- [Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20.](https://agentprime.io/advisories/CVE-2021-43716.md)
  `CVE-2021-43716` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS
- [http4k: \`DigestAuthProvider.verify\` ignored configured algorithm and did not bind to request URI](https://agentprime.io/advisories/GHSA-vxxm-wwqh-mh47.md)
  `GHSA-vxxm-wwqh-mh47`, `CVE-2026-54147` · Maven `org.http4k:http4k-security-digest`: affected `>=6.0.0.0, <6.50.0.0 || >=5.0.0.0, <5.42.0.0 || <=4.48.2.0`, fixed in `6.50.0.0`, `5.42.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)](https://agentprime.io/advisories/GHSA-xhcr-cqfr-m3hv.md)
  `GHSA-xhcr-cqfr-m3hv`, `CVE-2026-91988` · PyPI `atomic-agents-stack`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS, CWE-494
- [Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)](https://agentprime.io/advisories/CVE-2026-66795.md)
  `CVE-2026-66795` · CVE record: Red Hat multicluster engine for Kubernetes 2.10 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set](https://agentprime.io/advisories/GHSA-fhgh-wq4q-r37x.md)
  `GHSA-fhgh-wq4q-r37x`, `GO-2026-6246` · Go `gitlab.com/uniget-org/cli`: affected `>=0.27.4, <0.28.9`, fixed in `0.28.9` · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Command injection, Weak cryptography or TLS
- [Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling](https://agentprime.io/advisories/GHSA-92hr-gmr6-h8cp.md)
  `GHSA-92hr-gmr6-h8cp` · npm `ep_etherpad-lite`: affected `<3.3.0`, fixed in `3.3.0` · No CVSS score · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal, Information disclosure, Weak cryptography or TLS, CWE-208
- [openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modi...](https://agentprime.io/advisories/GHSA-w4j7-wfgw-r52w.md)
  `GHSA-w4j7-wfgw-r52w`, `CVE-2026-74901`, `PYSEC-2026-3773` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable ...](https://agentprime.io/advisories/GHSA-j9mh-57cc-665x.md)
  `GHSA-j9mh-57cc-665x`, `CVE-2026-74889`, `PYSEC-2026-3765` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been forma...](https://agentprime.io/advisories/GHSA-743f-89fg-x288.md)
  `GHSA-743f-89fg-x288`, `CVE-2026-74888`, `PYSEC-2026-3764` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/modules/pqc.py. No direct calls to random.\* were present in the...](https://agentprime.io/advisories/GHSA-cx72-m6xj-3vf6.md)
  `GHSA-cx72-m6xj-3vf6`, `CVE-2026-74887`, `PYSEC-2026-3745` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 6.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and ...](https://agentprime.io/advisories/GHSA-vxf9-vwp6-2w43.md)
  `GHSA-vxf9-vwp6-2w43`, `CVE-2026-74871`, `PYSEC-2026-3976` · PyPI `openssl-encrypt`: affected `<1.4.6`, fixed in `1.4.6` · CVSS 6.9 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS
- [pkp pkp-lib API Key Generation APIProfileForm.php setData entropy](https://agentprime.io/advisories/CVE-2026-19906.md)
  `CVE-2026-19906` · CVE record: pkp pkp-lib · CVSS 6.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Weak cryptography or TLS, CWE-331
- [mangroup dtale Flask Session Cookie app.py build_secret_key random values](https://agentprime.io/advisories/CVE-2026-19896.md)
  `CVE-2026-19896` · CVE record: mangroup dtale · CVSS 6.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310
- [@fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key](https://agentprime.io/advisories/CVE-2026-18500.md)
  `CVE-2026-18500` · CVE record: @fastify/jwt @fastify/jwt · CVSS 8.1 High · Not analysed yet · Published 15 Aug 2026 · Tags: Weak cryptography or TLS
- [TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption](https://agentprime.io/advisories/CVE-2026-19891.md)
  `CVE-2026-19891` · CVE record: TRENDnet TEW-WLC100 · CVSS 6.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310
- [Quay: stripe webhook accepts forged events without signature verification in quay](https://agentprime.io/advisories/CVE-2026-74244.md)
  `CVE-2026-74244` · CVE record: Red Hat Red Hat OpenShift Update Service and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in OpenVPN](https://agentprime.io/advisories/CVE-2026-63650.md)
  `CVE-2026-63650` · CVE record: OpenVPN OpenVPN · CVSS 2.0 Low · Not analysed yet · Published 14 Aug 2026 · Tags: Weak cryptography or TLS, CWE-115
- [PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-19910.md)
  `CVE-2026-19910` · CVE record: PAX Technology Q80 · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2026 · Tags: Weak cryptography or TLS
- [TL280](https://agentprime.io/advisories/CVE-2026-27871.md)
  `CVE-2026-27871` · CVE record: Johnson Controls TL280 · CVSS 2.9 Low · Not analysed yet · Published 14 Aug 2026 · Tags: Weak cryptography or TLS
- [Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb](https://agentprime.io/advisories/GO-2026-6180.md)
  `GO-2026-6180`, `BIT-golang-2026-56864`, `CVE-2026-56864` · Go `golang.org/x/mod` and 1 more: affected `<0.40.0`, fixed in `0.40.0` · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS
- [Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog](https://agentprime.io/advisories/GO-2026-6179.md)
  `GO-2026-6179`, `BIT-golang-2026-56865`, `CVE-2026-56865` · Go `golang.org/x/mod` and 1 more: affected `<0.40.0`, fixed in `0.40.0` · CVSS 8.4 High · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS
- [Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy](https://agentprime.io/advisories/CVE-2026-19748.md)
  `CVE-2026-19748` · CVE record: Tenda CH7 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS, CWE-331
- [rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode](https://agentprime.io/advisories/CVE-2026-70454.md)
  `CVE-2026-70454` · CVE record: RsyncProject rsync · CVSS 7.6 High · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS
- [WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-28148.md)
  `CVE-2026-28148` · CVE record: miniOrange Headless Single Sign On · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS
- [Authentication Bypass](https://agentprime.io/advisories/CVE-2026-12263.md)
  `CVE-2026-12263` · CVE record: Zohocorp ManageEngine Password Manager Pro and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS
- [Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto](https://agentprime.io/advisories/CVE-2026-16458.md)
  `CVE-2026-16458` · CVE record: Oberon microsystems AG ocrypto · CVSS 5.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS, CWE-208
- [Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto](https://agentprime.io/advisories/CVE-2026-16459.md)
  `CVE-2026-16459` · CVE record: Oberon microsystems AG Oberon PSA Crypto · CVSS 5.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS, CWE-208
- [GlobalProtect App: Improper Certificate Validation Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-0296.md)
  `CVE-2026-0296` · CVE record: Palo Alto Networks GlobalProtect App · CVSS 4.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Weak cryptography or TLS
- [Integration credential holders may impersonate users in JFrog Access](https://agentprime.io/advisories/CVE-2026-68759.md)
  `CVE-2026-68759` · CVE record: jfrog artifactory · CVSS 7.2 High · Not analysed yet · Published 12 Aug 2026 · Tags: Weak cryptography or TLS
- [Potential improper SAML signature verification in JFrog Artifactory](https://agentprime.io/advisories/CVE-2026-68757.md)
  `CVE-2026-68757` · CVE record: jfrog artifactory · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Weak cryptography or TLS
- [In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.](https://agentprime.io/advisories/CVE-2025-59327.md)
  `CVE-2025-59327` · CVE record · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Weak cryptography or TLS
- [CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets and cryptographic details.](https://agentprime.io/advisories/CVE-2025-59325.md)
  `CVE-2025-59325` · CVE record · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Weak cryptography or TLS
- [CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.](https://agentprime.io/advisories/CVE-2025-59324.md)
  `CVE-2025-59324` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Weak cryptography or TLS
- [Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)](https://agentprime.io/advisories/CVE-2026-71290.md)
  `CVE-2026-71290` · CVE record: Apache Software Foundation Apache HttpComponents Client · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in SonicWall GMS](https://agentprime.io/advisories/CVE-2026-66154.md)
  `CVE-2026-66154` · CVE record: SonicWall GMS · CVSS 8.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Active Directory Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-65777.md)
  `CVE-2026-65777` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Windows Schannel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-62757.md)
  `CVE-2026-62757` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [CAI Content Credentials | Improper Certificate Validation (CWE-295)](https://agentprime.io/advisories/CVE-2026-48437.md)
  `CVE-2026-48437` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)](https://agentprime.io/advisories/CVE-2026-48386.md)
  `CVE-2026-48386` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers](https://agentprime.io/advisories/CVE-2026-11814.md)
  `CVE-2026-11814` · CVE record: NETGEAR BE9300 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Ivanti Endpoint Manager](https://agentprime.io/advisories/CVE-2026-18129.md)
  `CVE-2026-18129` · CVE record: Ivanti Endpoint Manager · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions](https://agentprime.io/advisories/CVE-2026-15556.md)
  `CVE-2026-15556` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery](https://agentprime.io/advisories/CVE-2026-15554.md)
  `CVE-2026-15554` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Picketlink-federation: auth bypass in picketlink saml unsolicited-response](https://agentprime.io/advisories/CVE-2026-10579.md)
  `CVE-2026-10579` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Multiple vulnerabilities in SAP Business AI Platform (Approuter)](https://agentprime.io/advisories/CVE-2026-66776.md)
  `CVE-2026-66776` · CVE record: SAP_SE SAP Business AI Platform (Approuter) · CVSS 5.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Multiple vulnerabilities in SAP Business AI Platform (Approuter)](https://agentprime.io/advisories/CVE-2026-66760.md)
  `CVE-2026-66760` · CVE record: SAP_SE SAP Business AI Platform (Approuter) · CVSS 6.4 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials](https://agentprime.io/advisories/CVE-2026-18611.md)
  `CVE-2026-18611` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.](https://agentprime.io/advisories/CVE-2026-10754.md)
  `CVE-2026-10754` · CVE record: Pegasystems Pega Infinity · CVSS 8.6 High · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Signature validation vulnerability affecting DigiDoc applications](https://agentprime.io/advisories/CVE-2026-59112.md)
  `CVE-2026-59112` · CVE record: Estonian Information System Authority (RIA) libdigidocpp and 2 more · CVSS 4.4 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS, CWE-754
- [systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path](https://agentprime.io/advisories/CVE-2026-16742.md)
  `CVE-2026-16742` · CVE record: systemd systemd-homed · CVSS 6.7 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation, Weak cryptography or TLS
- [Apache Ranger: Clients accept TLS certificates issued for other hostnames](https://agentprime.io/advisories/CVE-2026-65942.md)
  `CVE-2026-65942` · CVE record: Apache Software Foundation Apache Ranger · CVSS 7.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in ECOVACS ROBOTICS Android App "ECOVACS PRO" and others](https://agentprime.io/advisories/CVE-2026-66410.md)
  `CVE-2026-66410` · CVE record: ECOVACS ROBOTICS Android App "ECOVACS PRO" and 1 more · CVSS 2.3 Low · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in ECOVACS ROBOTICS DEEBOT PRO M1 and others](https://agentprime.io/advisories/CVE-2026-66407.md)
  `CVE-2026-66407` · CVE record: ECOVACS ROBOTICS DEEBOT PRO M1 and 1 more · CVSS 7.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in ECOVACS ROBOTICS DEEBOT PRO M1 and others](https://agentprime.io/advisories/CVE-2026-66406.md)
  `CVE-2026-66406` · CVE record: ECOVACS ROBOTICS DEEBOT PRO M1 and 1 more · CVSS 2.3 Low · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA4LTEwVDA4OjAwOjI1LjE0MDAwMFoiLCJDVkUtMjAyNi02NjQwNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA4LTE4VDE4OjI1OjQ3LjQyNzAwMFoiLCJDVkUtMjAyNS05MjEwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA4LTE4VDE4OjI1OjQ3LjQyNzAwMFoiLCJDVkUtMjAyNS05MjEwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.