# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery](https://agentprime.io/advisories/CVE-2025-30156.md)
  `CVE-2025-30156` · CVE record: ceph ceph · CVSS 8.9 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in ASE 2000](https://agentprime.io/advisories/CVE-2026-18717.md)
  `CVE-2026-18717` · CVE record: Applied Systems Engineering ASE2000 V2 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted (attacker with physi...](https://agentprime.io/advisories/GHSA-8jx3-27qf-3p97.md)
  `GHSA-8jx3-27qf-3p97`, `CVE-2026-81717`, `PYSEC-2026-3801` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (f...](https://agentprime.io/advisories/GHSA-xg52-638v-jc5m.md)
  `GHSA-xg52-638v-jc5m`, `CVE-2026-81714`, `PYSEC-2026-3799` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can per...](https://agentprime.io/advisories/GHSA-v9r6-grch-fxw7.md)
  `GHSA-v9r6-grch-fxw7`, `CVE-2026-81704`, `PYSEC-2026-3963` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature...](https://agentprime.io/advisories/GHSA-wxx9-p55f-wm34.md)
  `GHSA-wxx9-p55f-wm34`, `CVE-2026-81701`, `PYSEC-2026-3778` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG status without ins...](https://agentprime.io/advisories/GHSA-x38r-8wf3-q9hq.md)
  `GHSA-x38r-8wf3-q9hq`, `CVE-2026-81700`, `PYSEC-2026-3777` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http\:// URLs and unconfigured hosts. Attackers on the network pa...](https://agentprime.io/advisories/GHSA-xr64-hcxg-4ghr.md)
  `GHSA-xr64-hcxg-4ghr`, `CVE-2026-81691`, `PYSEC-2026-3797` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers wit...](https://agentprime.io/advisories/GHSA-3v63-778v-3mvp.md)
  `GHSA-3v63-778v-3mvp`, `CVE-2026-81689`, `PYSEC-2026-3959` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plai...](https://agentprime.io/advisories/GHSA-7c3q-gp4v-q29q.md)
  `GHSA-7c3q-gp4v-q29q`, `CVE-2026-81688`, `PYSEC-2026-3795` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the works...](https://agentprime.io/advisories/GHSA-2jv6-qqfm-m46m.md)
  `GHSA-2jv6-qqfm-m46m`, `CVE-2026-81681`, `PYSEC-2026-3791` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. ...](https://agentprime.io/advisories/GHSA-grhj-cpmg-f5mx.md)
  `GHSA-grhj-cpmg-f5mx`, `CVE-2026-81680`, `PYSEC-2026-3957` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Log4j2 AmqpAppender disables TLS hostname verification by default](https://agentprime.io/advisories/CVE-2026-59272.md)
  `CVE-2026-59272` · CVE record: Spring Spring AMQP · CVSS 6.8 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [CVE-2026-19854 CVE Record](https://agentprime.io/advisories/CVE-2026-19854.md)
  `CVE-2026-19854` · CVE record: Grafana Clickhouse Datasource · CVSS 6.1 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt before 1.4.9 Weak Cryptographic Parameters](https://agentprime.io/advisories/CVE-2026-81718.md)
  `CVE-2026-81718` · CVE record: jahlives openssl_encrypt · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage](https://agentprime.io/advisories/CVE-2026-80211.md)
  `CVE-2026-80211` · CVE record: FrontAccounting FrontAccounting · CVSS 8.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell PowerProtect One](https://agentprime.io/advisories/CVE-2026-74774.md)
  `CVE-2026-74774` · CVE record: Dell PowerProtect One · CVSS 5.9 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Weak cryptography or TLS
- [Bucket Squatting in Vertex AI Search for Commerce](https://agentprime.io/advisories/CVE-2026-19485.md)
  `CVE-2026-19485` · CVE record: Google Cloud Vertex AI Search for Commerce · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Weak cryptography or TLS
- [Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client](https://agentprime.io/advisories/CVE-2026-81034.md)
  `CVE-2026-81034` · CVE record: gravitl netmaker · CVSS 8.3 High · Not analysed yet · Published 26 Aug 2026 · Tags: Weak cryptography or TLS
- [kas Persistently Disables SSH Host Key Checking](https://agentprime.io/advisories/GHSA-mv8m-v9v6-5f94.md)
  `GHSA-mv8m-v9v6-5f94`, `CVE-2026-54548`, `PYSEC-2026-3855` · PyPI `kas`: affected `<5.4`, fixed in `5.4` · CVSS 3.3 Low · Not analysed yet · Published 26 Aug 2026 · Tags: Weak cryptography or TLS
- [Insecure PIN derivation mechanism in Admin By Request (ABR)](https://agentprime.io/advisories/CVE-2026-78236.md)
  `CVE-2026-78236` · CVE record: Admin By Request (ABR) Admin By Request (ABR) · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control, Authentication bypass, Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Milesight AM102/102L V2 and others](https://agentprime.io/advisories/CVE-2026-29988.md)
  `CVE-2026-29988` · CVE record: Milesight AM102/102L V2 and 4 more · CVSS 8.3 High · Not analysed yet · Published 26 Aug 2026 · Tags: Weak cryptography or TLS
- [TypeBot: Account takeover via brute-forceable 6-digit magic-link code](https://agentprime.io/advisories/CVE-2026-62862.md)
  `CVE-2026-62862` · CVE record: baptisteArno typebot.io · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Improper certificate validation in NVIDIA NemoClaw](https://agentprime.io/advisories/CVE-2026-65084.md)
  `CVE-2026-65084` · CVE record: NVIDIA NemoClaw · CVSS 8.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: Weak cryptography or TLS
- [Weak encryption in Google Chrome](https://agentprime.io/advisories/CVE-2026-79084.md)
  `CVE-2026-79084` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Weak cryptography or TLS
- [X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads](https://agentprime.io/advisories/CVE-2026-79785.md)
  `CVE-2026-79785` · CVE record: CVHub520 X-AnyLabeling · CVSS 8.2 High · Not analysed yet · Published 25 Aug 2026 · Tags: Weak cryptography or TLS
- [WatchGuard Agent improper authentication allows unauthenticated remote code execution](https://agentprime.io/advisories/CVE-2026-57910.md)
  `CVE-2026-57910` · CVE record: WatchGuard WatchGuard Agent · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-494
- [TYPO3-EXT-SA-2026-015: Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)](https://agentprime.io/advisories/PKSA-p17b-6gjj-m8kp.md)
  `PKSA-p17b-6gjj-m8kp`, `CVE-2026-77131` · Packagist `syssy/syssy-typo3-extension`: affected `<3.0.6`, fixed in `3.0.6` · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Weak cryptography or TLS
- [Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking](https://agentprime.io/advisories/CVE-2026-56706.md)
  `CVE-2026-56706` · CVE record: vrana adminer · CVSS 6.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Weak cryptography or TLS
- [Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key](https://agentprime.io/advisories/GHSA-w67g-5rqw-f597.md)
  `GHSA-w67g-5rqw-f597`, `GO-2026-6278` · Go `github.com/gorilla/websocket`: affected `<1.5.3`, fixed in `1.5.3` · CVSS 4.0, no score published · Not analysed yet · Published 24 Aug 2026 · Tags: Weak cryptography or TLS
- [HP Easy Start for macOS - Security Update](https://agentprime.io/advisories/CVE-2026-12556.md)
  `CVE-2026-12556` · CVE record: HP Inc HP Easy Start for macOS · CVSS 7.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Weak cryptography or TLS
- [Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates](https://agentprime.io/advisories/CVE-2026-78323.md)
  `CVE-2026-78323` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Weak cryptography or TLS
- [Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass](https://agentprime.io/advisories/CVE-2026-62243.md)
  `CVE-2026-62243` · CVE record: netty netty · CVSS 8.7 High · Not analysed yet · Published 22 Aug 2026 · Tags: Weak cryptography or TLS
- [Combodo iTop: Weak secret generation for inline image](https://agentprime.io/advisories/CVE-2026-27490.md)
  `CVE-2026-27490` · CVE record: Combodo iTop · CVSS 7.5 High · Not analysed yet · Published 21 Aug 2026 · Tags: Weak cryptography or TLS, CWE-331
- [VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)](https://agentprime.io/advisories/CVE-2026-53762.md)
  `CVE-2026-53762` · CVE record: veracrypt VeraCrypt · CVSS 6.2 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Weak cryptography or TLS
- [Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE](https://agentprime.io/advisories/CVE-2026-77812.md)
  `CVE-2026-77812` · CVE record: DJI Neo and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Weak cryptography or TLS
- [OMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure](https://agentprime.io/advisories/CVE-2026-75946.md)
  `CVE-2026-75946` · CVE record: HP Inc OMEN Gaming Hub · CVSS 8.2 High · Not analysed yet · Published 21 Aug 2026 · Tags: Weak cryptography or TLS
- [Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP](https://agentprime.io/advisories/CVE-2026-68745.md)
  `CVE-2026-68745` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 8.1 High · Not analysed yet · Published 21 Aug 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17024.md)
  `CVE-2026-17024` · CVE record: IBM AIX and 1 more · CVSS 7.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [Azure Data Factory Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62834.md)
  `CVE-2026-62834` · CVE record: Microsoft Azure Data Factory · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent](https://agentprime.io/advisories/CVE-2026-72861.md)
  `CVE-2026-72861` · CVE record: appwrite templates · CVSS 6.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [lin-snow Ech0 crypto.go MD5Encrypt risky encryption](https://agentprime.io/advisories/CVE-2026-77151.md)
  `CVE-2026-77151` · CVE record: lin-snow Ech0 · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310
- [libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend](https://agentprime.io/advisories/CVE-2026-53583.md)
  `CVE-2026-53583` · CVE record: libgit2 libgit2 · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [node-opcua missing nonce verification in UserNameIdentityToken authentication](https://agentprime.io/advisories/GHSA-mq36-523m-x7vv.md)
  `GHSA-mq36-523m-x7vv`, `CVE-2026-54155` · npm `node-opcua`: affected `<=2.165.0`, no fixed version yet · CVSS 7.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways](https://agentprime.io/advisories/CVE-2026-19683.md)
  `CVE-2026-19683` · CVE record: TP-Link Systems Inc. ER7212PC v2 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching](https://agentprime.io/advisories/CVE-2026-73253.md)
  `CVE-2026-73253` · CVE record: cesanta mongoose · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification](https://agentprime.io/advisories/CVE-2026-73251.md)
  `CVE-2026-73251` · CVE record: cesanta mongoose · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka](https://agentprime.io/advisories/CVE-2026-76403.md)
  `CVE-2026-76403` · CVE record: Splunk Splunk Connect for Kafka · CVSS 7.4 High · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76362.md)
  `CVE-2026-76362` · CVE record: Splunk Splunk SOAR · CVSS 7.4 High · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [RDK-B WebUI improper cryptographic signature verification vulnerability](https://agentprime.io/advisories/CVE-2026-19505.md)
  `CVE-2026-19505` · CVE record: RDK RDK-B WebUI · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16822.md)
  `CVE-2026-16822` · CVE record: IBM AIX and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Critical flaw impacting OZOLS ERP's automatic update channel](https://agentprime.io/advisories/CVE-2026-22306.md)
  `CVE-2026-22306` · CVE record: Ozols Grupa OZOLS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS, CWE-494, CWE-829
- [OTTO® Fleet Manager – Weak Password Hashing Configuration](https://agentprime.io/advisories/CVE-2026-75112.md)
  `CVE-2026-75112` · CVE record: Rockwell Automation OTTO® Fleet Manager · CVSS 6.9 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Power System Improper Certificate Validation](https://agentprime.io/advisories/CVE-2026-16835.md)
  `CVE-2026-16835` · CVE record: IBM Power Systems Firmware · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-15078.md)
  `CVE-2026-15078` · CVE record: IBM AIX and 1 more · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Missing MAC validation in wg(4) packet decryption](https://agentprime.io/advisories/CVE-2026-58085.md)
  `CVE-2026-58085` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify](https://agentprime.io/advisories/CVE-2026-72889.md)
  `CVE-2026-72889` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS, CWE-757
- [The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compar…](https://agentprime.io/advisories/CVE-2026-50720.md)
  `CVE-2026-50720` · CVE record · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Weak cryptography or TLS
- [The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking sig…](https://agentprime.io/advisories/CVE-2026-50719.md)
  `CVE-2026-50719` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control, Weak cryptography or TLS, CWE-474
- [Missing JSON Web Token signature validation in Otalio Ship Property Management System](https://agentprime.io/advisories/CVE-2025-9210.md)
  `CVE-2025-9210` · CVE record: Otalio Ship Property Management System · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA4LTE4VDE4OjI1OjQ3LjQyNzAwMFoiLCJDVkUtMjAyNS05MjEwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA4LTI3VDIwOjQ3OjAxLjUxMjAwMFoiLCJDVkUtMjAyNi0zOTk0NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA4LTI3VDIwOjQ3OjAxLjUxMjAwMFoiLCJDVkUtMjAyNi0zOTk0NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.