# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor](https://agentprime.io/advisories/CVE-2026-86304.md)
  `CVE-2026-86304` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Sept 2026 · Tags: Weak cryptography or TLS
- [wolfSSL CA-cache hit overrides callback](https://agentprime.io/advisories/CVE-2026-82208.md)
  `CVE-2026-82208` · CVE record: curl curl · CVSS 7.5 High · Not analysed yet · Published 6 Sept 2026 · Tags: Weak cryptography or TLS
- [OpenSSL pinning bypass](https://agentprime.io/advisories/CVE-2026-80230.md)
  `CVE-2026-80230` · CVE record: curl curl · CVSS 7.5 High · Not analysed yet · Published 6 Sept 2026 · Tags: Weak cryptography or TLS
- [TLS server impersonation possible in Mikrotik RouterOS](https://agentprime.io/advisories/CVE-2026-67278.md)
  `CVE-2026-67278` · CVE record: Mikrotik RouterOS · CVSS 6.3 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Weak cryptography or TLS
- [SSH user impersonation possible in Mikrotik RouterOS](https://agentprime.io/advisories/CVE-2026-67276.md)
  `CVE-2026-67276` · CVE record: Mikrotik RouterOS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Weak cryptography or TLS
- [WWBN AVideo Weak PRNG Password Generation via External Login](https://agentprime.io/advisories/CVE-2026-86187.md)
  `CVE-2026-86187` · CVE record: WWBN AVideo · CVSS 7.4 High · Not analysed yet · Published 5 Sept 2026 · Tags: Weak cryptography or TLS
- [Bilibili Desktop through 1.18.0 Remote Code Execution via TLS Verification Bypass](https://agentprime.io/advisories/CVE-2026-86185.md)
  `CVE-2026-86185` · CVE record: Bilibili Bilibili Desktop · CVSS 8.6 High · Not analysed yet · Published 5 Sept 2026 · Tags: Weak cryptography or TLS
- [SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor](https://agentprime.io/advisories/GHSA-6hxq-p678-4hr2.md)
  `GHSA-6hxq-p678-4hr2` · npm `@simplewebauthn/server`: affected `<13.3.2`, fixed in `13.3.2` · CVSS 4.0, no score published · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS, CWE-296
- [IBM i is Affected By Cryptographic Algorithm Weakness in DCM \[\]](https://agentprime.io/advisories/CVE-2026-16693.md)
  `CVE-2026-16693` · CVE record: IBM i · CVSS 4.4 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [IBM i is Affected By Multiple Vulnerabilities in Debug Server](https://agentprime.io/advisories/CVE-2026-17274.md)
  `CVE-2026-17274` · CVE record: IBM i · CVSS 5.4 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.](https://agentprime.io/advisories/CVE-2026-81859.md)
  `CVE-2026-81859` · CVE record: IBM Cloud Pak for Business Automation · CVSS 6.2 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint](https://agentprime.io/advisories/CVE-2026-15937.md)
  `CVE-2026-15937` · CVE record: Checkmk GmbH Checkmk · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper OCSP response validation in Snowflake drivers](https://agentprime.io/advisories/CVE-2026-85525.md)
  `CVE-2026-85525` · CVE record: Snowflake Snowflake Connector for Python and 4 more · CVSS 7.4 High · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP](https://agentprime.io/advisories/CVE-2026-71216.md)
  `CVE-2026-71216` · CVE record: Apache Software Foundation Apache SkyWalking · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing.](https://agentprime.io/advisories/CVE-2026-79389.md)
  `CVE-2026-79389` · CVE record · CVSS 7.4 High · Not analysed yet · Published 4 Sept 2026 · Tags: Weak cryptography or TLS
- [Copilot Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-80098.md)
  `CVE-2026-80098` · CVE record: Microsoft Microsoft Copilot Studio · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements](https://agentprime.io/advisories/GHSA-86w9-cpqp-85rv.md)
  `GHSA-86w9-cpqp-85rv`, `CVE-2026-33894`, `CVE-2026-85393`, `GHSA-ppp5-5v6c-4jwp` · npm `node-forge`: affected `<=1.4.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS, CWE-20
- [python-jose algorithm confusion guard bypassed by DER-encoded public keys](https://agentprime.io/advisories/GHSA-3qf3-8w2g-rqmx.md)
  `GHSA-3qf3-8w2g-rqmx`, `CVE-2024-33663`, `CVE-2026-85394`, `GHSA-6c5p-j8vq-pqhj`, `PYSEC-2024-232`, `PYSEC-2026-4298` · PyPI `python-jose`: affected `<=3.5.0`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification](https://agentprime.io/advisories/CVE-2026-84185.md)
  `CVE-2026-84185` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities exists in IBM Netezza Software](https://agentprime.io/advisories/CVE-2026-9744.md)
  `CVE-2026-9744` · CVE record: IBM Netezza Software · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities exists in IBM Netezza Software](https://agentprime.io/advisories/CVE-2026-9036.md)
  `CVE-2026-9036` · CVE record: IBM Netezza Software · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Eclipse Foundation Eclipse aeriOS](https://agentprime.io/advisories/CVE-2026-84736.md)
  `CVE-2026-84736` · CVE record: Eclipse Foundation Eclipse aeriOS · CVSS 8.3 High · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks](https://agentprime.io/advisories/CVE-2026-85221.md)
  `CVE-2026-85221` · CVE record: misp misp · CVSS 7.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Eclipse Foundation Eclipse Arrowhead](https://agentprime.io/advisories/CVE-2026-82180.md)
  `CVE-2026-82180` · CVE record: Eclipse Foundation Eclipse Arrowhead · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads](https://agentprime.io/advisories/CVE-2026-3416.md)
  `CVE-2026-3416` · CVE record: WSO2 WSO2 API Manager and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Siemens Mendix SAML (Mendix 10 compatible) and others](https://agentprime.io/advisories/CVE-2026-80465.md)
  `CVE-2026-80465` · CVE record: Siemens Mendix SAML (Mendix 10 compatible) and 2 more · CVSS 8.8 High · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default](https://agentprime.io/advisories/GHSA-76g3-c3x4-crvx.md)
  `GHSA-76g3-c3x4-crvx`, `CVE-2026-84366`, `PYSEC-2026-3918` · PyPI `scrapy`: affected `<2.17`, fixed in `2.17` · CVSS 7.4 High · Not analysed yet · Published 2 Sept 2026 · Tags: Weak cryptography or TLS
- [Missing encryption of sensitive data in Jenkins Project Jenkins Parameterized Remote Trigger Plugin](https://agentprime.io/advisories/CVE-2026-84676.md)
  `CVE-2026-84676` · CVE record: Jenkins Project Jenkins Parameterized Remote Trigger Plugin · CVSS 4.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Eclipse Foundation Eclipse aeriOS](https://agentprime.io/advisories/CVE-2026-82955.md)
  `CVE-2026-82955` · CVE record: Eclipse Foundation Eclipse aeriOS · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Weak cryptography or TLS
- [Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73776.md)
  `CVE-2026-73776` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.9 High · Not analysed yet · Published 1 Sept 2026 · Tags: Weak cryptography or TLS
- [Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint](https://agentprime.io/advisories/CVE-2026-73756.md)
  `CVE-2026-73756` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 5.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Weak cryptography or TLS
- [Unauthenticated Information Disclosure Leading to Data Exposure in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73743.md)
  `CVE-2026-73743` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 3.7 Low · Not analysed yet · Published 1 Sept 2026 · Tags: Weak cryptography or TLS
- [pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml](https://agentprime.io/advisories/GHSA-vx52-2968-3vc6.md)
  `GHSA-vx52-2968-3vc6`, `CVE-2026-101043` · npm `pnpm`: affected `>=10.7.0, <10.34.5 || >=11.0.0, <11.11.0`, fixed in `10.34.5`, `11.11.0` · CVSS 8.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure, Weak cryptography or TLS, Hard-coded credentials
- [Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2026-76133.md)
  `CVE-2026-76133` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Weak cryptography or TLS
- [ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE](https://agentprime.io/advisories/CVE-2026-66047.md)
  `CVE-2026-66047` · CVE record: Proper Fraction ProfilePress · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Phison PS3111-S11 Controller Firmware Signature Verification Bypass](https://agentprime.io/advisories/CVE-2026-82876.md)
  `CVE-2026-82876` · CVE record: Phison Electronics Corporation PS3111-S11 Controller Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Weak cryptography or TLS
- [Duplicate Advisory: Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception](https://agentprime.io/advisories/GHSA-frj6-5rhh-vwfw.md)
  `GHSA-frj6-5rhh-vwfw` · npm `nodemailer`: affected `<=8.0.7`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 31 Aug 2026 · Tags: Weak cryptography or TLS
- [AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass](https://agentprime.io/advisories/GHSA-whfj-rrrp-j597.md)
  `GHSA-whfj-rrrp-j597`, `CVE-2026-81852`, `EEF-CVE-2026-81852` · Hex `ash_admin`: affected `>=0.10.8, <1.3.1`, fixed in `1.3.1` · CVSS 2.1 Low · Not analysed yet · Published 31 Aug 2026 · Tags: Weak cryptography or TLS
- [TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values](https://agentprime.io/advisories/CVE-2026-82555.md)
  `CVE-2026-82555` · CVE record: TOTOLINK N600R · CVSS 6.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310
- [AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token](https://agentprime.io/advisories/CVE-2026-82645.md)
  `CVE-2026-82645` · CVE record: WWBN AVideo · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Weak cryptography or TLS
- [Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc](https://agentprime.io/advisories/GHSA-533g-4vf3-xwrj.md)
  `GHSA-533g-4vf3-xwrj`, `CVE-2026-75759`, `EEF-CVE-2026-75759` · Hex `oidcc`: affected `>=3.2.0-beta.1, <3.9.0`, fixed in `3.9.0` · CVSS 7.6 High · Not analysed yet · Published 30 Aug 2026 · Tags: Weak cryptography or TLS
- [pac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access Token](https://agentprime.io/advisories/CVE-2026-82461.md)
  `CVE-2026-82461` · CVE record: pac4j pac4j · CVSS 8.6 High · Not analysed yet · Published 29 Aug 2026 · Tags: Weak cryptography or TLS
- [Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in](https://agentprime.io/advisories/CVE-2026-82454.md)
  `CVE-2026-82454` · CVE record: omnivore-app omnivore · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Weak cryptography or TLS
- [Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key](https://agentprime.io/advisories/CVE-2026-17520.md)
  `CVE-2026-17520` · CVE record: Unknown Newsletters · CVSS 4.8 Medium · Not analysed yet · Published 29 Aug 2026 · Tags: Weak cryptography or TLS
- [BOSH vSphere CPI Improper Cert Validation](https://agentprime.io/advisories/CVE-2026-41012.md)
  `CVE-2026-41012` · CVE record: Cloud Foundry bosh-vsphere-cpi-release · CVSS 7.7 High · Not analysed yet · Published 29 Aug 2026 · Tags: Weak cryptography or TLS
- [org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)](https://agentprime.io/advisories/GHSA-c857-9x2m-cvh2.md)
  `GHSA-c857-9x2m-cvh2`, `CVE-2026-55860` · Maven `org.mariadb:r2dbc-mariadb`: affected `<1.4.1`, fixed in `1.4.1` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-qxvw-fvwx-5cp7.md)
  `GHSA-qxvw-fvwx-5cp7`, `CVE-2026-55857` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `<2.7.14 || >=3.0.0, <3.3.5 || >=3.4.0, <3.4.3 || >=3.5.0, <3.5.9`, fixed in `2.7.14`, `3.3.5`, `3.4.3`, `3.5.9` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-42r5-vhpq-m858.md)
  `GHSA-42r5-vhpq-m858`, `BIT-mariadb-2026-55854`, `BIT-mariadb-min-2026-55854`, `BIT-mysql-client-2026-55854`, `CVE-2026-55854` · npm `mariadb`: affected `<3.2.4 || >=3.3.0, <3.3.3 || >=3.4.0, <3.4.6 || >=3.5.0, <3.5.3`, fixed in `3.2.4`, `3.3.3`, `3.4.6`, `3.5.3` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2025-64649.md)
  `CVE-2025-64649` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS
- [IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component](https://agentprime.io/advisories/CVE-2025-36290.md)
  `CVE-2025-36290` · CVE record: IBM Integrated Analytics System · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS
- [BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections](https://agentprime.io/advisories/CVE-2026-81518.md)
  `CVE-2026-81518` · CVE record: MongoDB BI Connector · CVSS 8.7 High · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS
- [AIIR verification and policy gates could report success without enforcing the control (fail-open)](https://agentprime.io/advisories/GHSA-73p9-6hrp-8qhr.md)
  `GHSA-73p9-6hrp-8qhr` · PyPI `aiir`: affected `<1.7.0`, fixed in `1.7.0` · CVSS 4.0, no score published · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, CWE-636
- [MariaDB's connector leaks the cleartext password to an MitM despite \`ssl: true\`](https://agentprime.io/advisories/GHSA-cqhc-2h57-wpxf.md)
  `GHSA-cqhc-2h57-wpxf`, `BIT-mariadb-2026-55215`, `BIT-mariadb-min-2026-55215`, `BIT-mysql-client-2026-55215`, `CVE-2026-55215` · npm `mariadb`: affected `<3.2.4 || >=3.3.0, <3.3.3 || >=3.4.0, <3.4.6 || >=3.5.0, <3.5.3`, fixed in `3.2.4`, `3.3.3`, `3.4.6`, `3.5.3` · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Phalcon: Non-constant-time HMAC verification in \`Encryption\Crypt::decrypt\` (timing side-channel)](https://agentprime.io/advisories/GHSA-8jqh-95g6-7jpj.md)
  `GHSA-8jqh-95g6-7jpj`, `CVE-2026-54736`, `PKSA-65xj-m5g6-56k1` · Packagist `phalcon/cphalcon`: affected `<5.14.1`, fixed in `5.14.1` · CVSS 8.2 High · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, CWE-208
- [WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion](https://agentprime.io/advisories/CVE-2026-76581.md)
  `CVE-2026-76581` · CVE record: wpmudev WPMU DEV Dashboard · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS
- [Ebyte NA111-M Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-69658.md)
  `CVE-2026-69658` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Ebyte NA111-M Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-73809.md)
  `CVE-2026-73809` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission](https://agentprime.io/advisories/CVE-2026-81836.md)
  `CVE-2026-81836` · CVE record: RooCodeInc Roo-Code · CVSS 6.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310
- [Ceph RGW SigV4 handler accepts unsigned x-amz-\* headers on presigned requests, allowing privilege escalation](https://agentprime.io/advisories/CVE-2026-54330.md)
  `CVE-2026-54330` · CVE record: ceph ceph · CVSS 8.1 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Ceph: CephX AES Authentication error](https://agentprime.io/advisories/CVE-2026-39944.md)
  `CVE-2026-39944` · CVE record: ceph ceph · CVSS 8.8 High · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA4LTI3VDIwOjQ3OjAxLjUxMjAwMFoiLCJDVkUtMjAyNi0zOTk0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA5LTA3VDAxOjU3OjEzLjcxMTAwMFoiLCJDVkUtMjAyNi0yMDUwMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA5LTA3VDAxOjU3OjEzLjcxMTAwMFoiLCJDVkUtMjAyNi0yMDUwMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.