# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [foreman_kubevirt disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set](https://agentprime.io/advisories/GHSA-2qxw-7fmx-gqfm.md)
  `GHSA-2qxw-7fmx-gqfm`, `CVE-2026-1531` · RubyGems `foreman_kubevirt`: affected `<0.4.3`, fixed in `0.4.3` · CVSS 8.1 High · Not analysed yet · Published 2 Feb 2026 · Tags: Weak cryptography or TLS
- [Rancher CLI skips TLS verification on Rancher CLI login command](https://agentprime.io/advisories/GHSA-mc24-7m59-4q5p.md)
  `GHSA-mc24-7m59-4q5p`, `CVE-2025-67601`, `GO-2026-4393` · Go `github.com/rancher/rancher`: affected `<0.0.0-20260129092249-bb0625fd1896 || >=2.10.0, <2.10.11 || >=2.11.0, <2.11.10 || >=2.12.0, <2.12.6 || >=2.13.0, <2.13.2`, fixed in `0.0.0-20260129092249-bb0625fd1896`, `2.10.11`, `2.11.10`, `2.12.6`, `2.13.2` · CVSS 8.3 High · Not analysed yet · Published 1 Feb 2026 · Tags: Weak cryptography or TLS
- [Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v](https://agentprime.io/advisories/CVE-2025-15548.md)
  `CVE-2025-15548` · CVE record: TP-Link Systems Inc. VX800v v1.0 · CVSS 5.3 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Weak cryptography or TLS
- [\`libparsec_crypto\` does not check for weak order point of curve 25519](https://agentprime.io/advisories/CVE-2025-62514.md)
  `CVE-2025-62514` · CVE record: Scille parsec-cloud · CVSS 8.3 High · Not analysed yet · Published 29 Jan 2026 · Tags: Weak cryptography or TLS, CWE-1240
- [Transmission of Unencrypted Data in Content Distribution Service](https://agentprime.io/advisories/CVE-2026-23564.md)
  `CVE-2026-23564` · CVE record: TeamViewer DEX · CVSS 6.5 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Brother Industries, Ltd. Multiple MFPs and others](https://agentprime.io/advisories/CVE-2025-53869.md)
  `CVE-2025-53869` · CVE record: Brother Industries, Ltd. Multiple MFPs and 2 more · CVSS 6.3 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Weak cryptography or TLS
- [An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable strin…](https://agentprime.io/advisories/CVE-2025-69929.md)
  `CVE-2025-69929` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jan 2026 · Tags: Weak cryptography or TLS
- [Payment bypass in Commerce Paybox](https://agentprime.io/advisories/CVE-2026-0750.md)
  `CVE-2026-0750` · CVE record: Drupal Drupal Commerce Paybox · CVSS 8.7 High · Not analysed yet · Published 28 Jan 2026 · Tags: Weak cryptography or TLS
- [ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices](https://agentprime.io/advisories/GHSA-5x2r-hc65-25f9.md)
  `GHSA-5x2r-hc65-25f9`, `CVE-2026-24850` · crates.io `ml-dsa`: affected `>=0.0.4, <0.1.0-rc.4`, fixed in `0.1.0-rc.4` · CVSS 5.3 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Weak cryptography or TLS
- [Clatter has a PSK Validity Rule Violation issue](https://agentprime.io/advisories/GHSA-253q-9q78-63x4.md)
  `GHSA-253q-9q78-63x4`, `CVE-2026-24785` · crates.io `clatter`: affected `<2.2.0`, fixed in `2.2.0` · CVSS 8.0 High · Not analysed yet · Published 28 Jan 2026 · Tags: Weak cryptography or TLS
- [FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.](https://agentprime.io/advisories/CVE-2022-40620.md)
  `CVE-2022-40620` · CVE record · CVSS 7.7 High · Not analysed yet · Published 28 Jan 2026 · Tags: Weak cryptography or TLS
- ['openssl dgst' one-shot codepath silently truncates inputs >16MB](https://agentprime.io/advisories/CVE-2025-15469.md)
  `CVE-2025-15469` · CVE record: OpenSSL OpenSSL · CVSS 5.5 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Weak cryptography or TLS
- [Quick-Media Batik Codec FIX Package has Vulnerability in PNG Codec](https://agentprime.io/advisories/GHSA-23f4-hfmq-94mj.md)
  `GHSA-23f4-hfmq-94mj`, `CVE-2026-24807` · Maven `com.github.liuyueyi.media:batik-codec-fix`: affected `<=3.0.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Weak cryptography or TLS
- [Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods](https://agentprime.io/advisories/GHSA-63v5-26vq-m4vm.md)
  `GHSA-63v5-26vq-m4vm`, `CVE-2026-1190` · Maven `org.keycloak:keycloak-services`: affected `<=26.5.2`, no fixed version yet · CVSS 3.1 Low · Not analysed yet · Published 26 Jan 2026 · Tags: Weak cryptography or TLS, Authentication bypass, CWE-112
- [dcap-qvl has Missing Verification for QE Identity](https://agentprime.io/advisories/GHSA-796p-j2gh-9m2q.md)
  `GHSA-796p-j2gh-9m2q`, `CVE-2026-22696`, `PYSEC-2026-326` · crates.io `dcap-qvl` and 4 more: affected `<0.3.9`, fixed in `0.3.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2026 · Tags: Weak cryptography or TLS
- [X25519 secret validation did not check buffer length or clamping](https://agentprime.io/advisories/GHSA-435g-fcv3-8j26.md)
  `GHSA-435g-fcv3-8j26`, `CVE-2026-76234`, `RUSTSEC-2026-0023`, `RUSTSEC-2026-0024`, `RUSTSEC-2026-0025`, `RUSTSEC-2026-0026` · crates.io `libcrux-ecdh`: affected `>=0.0.0-0, <0.0.6`, fixed in `0.0.6` · CVSS 8.7 High · Not analysed yet · Published 26 Jan 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Salesforce Marketing Cloud Engagement](https://agentprime.io/advisories/CVE-2026-22585.md)
  `CVE-2026-22585` · CVE record: Salesforce Marketing Cloud Engagement · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jan 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Dell ObjectScale](https://agentprime.io/advisories/CVE-2026-22274.md)
  `CVE-2026-22274` · CVE record: Dell ObjectScale · CVSS 6.5 Medium · Not analysed yet · Published 23 Jan 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Dell ObjectScale](https://agentprime.io/advisories/CVE-2026-22271.md)
  `CVE-2026-22271` · CVE record: Dell ObjectScale · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: Weak cryptography or TLS
- [Withdrawn Advisory: Open WebUI/ZDI-CAN-28259](https://agentprime.io/advisories/GHSA-vh96-p962-544h.md)
  `GHSA-vh96-p962-544h`, `CVE-2026-0767` · PyPI `open-webui`: affected `<=0.6.33`, no fixed version yet · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 23 Jan 2026 · Tags: Weak cryptography or TLS
- [An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficie…](https://agentprime.io/advisories/CVE-2025-67229.md)
  `CVE-2025-67229` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jan 2026 · Tags: Weak cryptography or TLS
- [An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28.](https://agentprime.io/advisories/CVE-2025-52026.md)
  `CVE-2025-52026` · CVE record · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass](https://agentprime.io/advisories/GHSA-4xc5-wfwc-jw47.md)
  `GHSA-4xc5-wfwc-jw47`, `CVE-2025-65098` · npm `@typebot.io/js`: affected `<0.9.15`, fixed in `0.9.15` · CVSS 7.4 High · Not analysed yet · Published 22 Jan 2026 · Tags: Cross-site scripting (XSS), Information disclosure, Broken access control, Weak cryptography or TLS
- [Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU](https://agentprime.io/advisories/CVE-2025-32057.md)
  `CVE-2025-32057` · CVE record: Bosch Infotainment system ECU · CVSS 6.5 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Weak cryptography or TLS
- [NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force](https://agentprime.io/advisories/CVE-2025-64097.md)
  `CVE-2025-64097` · CVE record: nerves-hub nerves_hub_web · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jan 2026 · Tags: Weak cryptography or TLS
- [Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks](https://agentprime.io/advisories/CVE-2025-27377.md)
  `CVE-2025-27377` · CVE record: Altium Altium Designer · CVSS 5.3 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: Weak cryptography or TLS
- [Triton VM has a Soundness Vulnerability due to Improper Sampling of Randomness](https://agentprime.io/advisories/GHSA-rjr4-v43m-pxq6.md)
  `GHSA-rjr4-v43m-pxq6`, `RUSTSEC-2026-0004` · crates.io `triton-vm`: affected `>=0.41.0, <2.0.0`, fixed in `2.0.0` · CVSS 4.0, no score published · Not analysed yet · Published 21 Jan 2026 · Tags: Weak cryptography or TLS
- [go-tuf improperly validates the configured threshold for delegations](https://agentprime.io/advisories/GHSA-fphv-w9fq-2525.md)
  `GHSA-fphv-w9fq-2525`, `CVE-2026-23992`, `GO-2026-4349` · Go `github.com/theupdateframework/go-tuf/v2`: affected `<2.3.1`, fixed in `2.3.1` · CVSS 5.9 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Weak cryptography or TLS
- [sm-crypto Affected by Signature Forgery in SM2-DSA](https://agentprime.io/advisories/GHSA-hpwg-xg7m-3p6m.md)
  `GHSA-hpwg-xg7m-3p6m`, `CVE-2026-23965` · npm `sm-crypto`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 7.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: Weak cryptography or TLS
- [sm-crypto Affected by Signature Malleability in SM2-DSA](https://agentprime.io/advisories/GHSA-qv7w-v773-3xqm.md)
  `GHSA-qv7w-v773-3xqm`, `CVE-2026-23967` · npm `sm-crypto`: affected `<0.3.14`, fixed in `0.3.14` · CVSS 7.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: Weak cryptography or TLS
- [Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-21945.md)
  `CVE-2026-21945` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 7.5 High · Not analysed yet · Published 20 Jan 2026 · Tags: Weak cryptography or TLS, Denial of service
- [Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture](https://agentprime.io/advisories/CVE-2025-58743.md)
  `CVE-2025-58743` · CVE record: Milner ImageDirector Capture · CVSS 7.2 High · Not analysed yet · Published 20 Jan 2026 · Tags: Weak cryptography or TLS
- [Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment](https://agentprime.io/advisories/GHSA-63m5-974w-448v.md)
  `GHSA-63m5-974w-448v`, `CVE-2026-23518`, `GO-2026-4335` · Go `github.com/fleetdm/fleet`: affected `<4.43.5-0.20260112202845-e225ef57912c || >=4.75.0, <4.75.2 || >=4.76.0, <4.76.2 || >=4.77.0, <4.77.1 || >=4.78.0, <4.78.3`, fixed in `4.43.5-0.20260112202845-e225ef57912c`, `4.75.2`, `4.76.2`, `4.77.1`, `4.78.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jan 2026 · Tags: Weak cryptography or TLS
- [Multiple vulnerabilities found in IBM ApplinX.](https://agentprime.io/advisories/CVE-2025-36418.md)
  `CVE-2025-36418` · CVE record: IBM ApplinX · CVSS 7.3 High · Not analysed yet · Published 20 Jan 2026 · Tags: Weak cryptography or TLS
- [Improper Server Certificate Validation in Automation Studio](https://agentprime.io/advisories/CVE-2025-11043.md)
  `CVE-2025-11043` · CVE record: B&R Industrial Automation GmbH B&R Automation Studio · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2026 · Tags: Weak cryptography or TLS
- [Supermicro BMC firmware update validation bypass](https://agentprime.io/advisories/CVE-2025-12007.md)
  `CVE-2025-12007` · CVE record: SMCI X13SEM-F · CVSS 8.4 High · Not analysed yet · Published 16 Jan 2026 · Tags: Weak cryptography or TLS
- [Supermicro BMC firmware update validation bypass](https://agentprime.io/advisories/CVE-2025-12006.md)
  `CVE-2025-12006` · CVE record: SMCI X12STW-F · CVSS 7.2 High · Not analysed yet · Published 16 Jan 2026 · Tags: Weak cryptography or TLS
- [AVEVA Process Optimization Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2025-64769.md)
  `CVE-2025-64769` · CVE record: AVEVA Process Optimization · CVSS 7.6 High · Not analysed yet · Published 16 Jan 2026 · Tags: Weak cryptography or TLS
- [Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)](https://agentprime.io/advisories/CVE-2026-21907.md)
  `CVE-2026-21907` · CVE record: Juniper Networks Junos Space · CVSS 8.2 High · Not analysed yet · Published 15 Jan 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Lenovo ThinkPlus FU100 and others](https://agentprime.io/advisories/CVE-2025-13454.md)
  `CVE-2025-13454` · CVE record: Lenovo ThinkPlus FU100 and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Weak cryptography or TLS
- [Missing encryption of sensitive data in Lenovo ThinkPlus FU100 and others](https://agentprime.io/advisories/CVE-2025-13453.md)
  `CVE-2025-13453` · CVE record: Lenovo ThinkPlus FU100 and 3 more · CVSS 5.1 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Weak cryptography or TLS
- [Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks "alg" (untrusted header.alg fallback)](https://agentprime.io/advisories/GHSA-3vhc-576x-3qv4.md)
  `GHSA-3vhc-576x-3qv4`, `CVE-2026-22818` · npm `hono`: affected `<4.11.4`, fixed in `4.11.4` · CVSS 8.2 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Hono JWT Middleware's JWT Algorithm Confusion via Unsafe Default (HS256) Allows Token Forgery and Auth Bypass](https://agentprime.io/advisories/GHSA-f67f-6cw9-8mq4.md)
  `GHSA-f67f-6cw9-8mq4`, `CVE-2026-22817` · npm `hono`: affected `<4.11.4`, fixed in `4.11.4` · CVSS 8.2 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Windows Kerberos Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20833.md)
  `CVE-2026-20833` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Windows Admin Center Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20965.md)
  `CVE-2026-20965` · CVE record: Microsoft Windows Admin Center in Azure Portal · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Jervis's AES CBC Mode is Without Authentication](https://agentprime.io/advisories/GHSA-gxp5-mv27-vjcj.md)
  `GHSA-gxp5-mv27-vjcj`, `CVE-2025-68931` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 8.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Jervis Has a JWT Algorithm Confusion Vulnerability](https://agentprime.io/advisories/GHSA-5pq9-5mpr-jj85.md)
  `GHSA-5pq9-5mpr-jj85`, `CVE-2025-68925` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 6.9 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Jervis Has Weak Random for Timing Attack Mitigation](https://agentprime.io/advisories/GHSA-c9q6-g3hr-8gww.md)
  `GHSA-c9q6-g3hr-8gww`, `CVE-2025-68704` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 8.2 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Jervis's Salt for PBKDF2 derived from password](https://agentprime.io/advisories/GHSA-36h5-vrq6-pp34.md)
  `GHSA-36h5-vrq6-pp34`, `CVE-2025-68703` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 8.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Jervis Has a SHA-256 Hex String Padding Bug](https://agentprime.io/advisories/GHSA-67rj-pjg6-pq59.md)
  `GHSA-67rj-pjg6-pq59`, `CVE-2025-68702` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 8.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Jervis has Deterministic AES IV Derivation from Passphrase](https://agentprime.io/advisories/GHSA-crxp-chh4-9ghp.md)
  `GHSA-crxp-chh4-9ghp`, `CVE-2025-68701` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 8.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Jervis Has a RSA PKCS#1 Padding Vulnerability](https://agentprime.io/advisories/GHSA-mqw7-c5gg-xq97.md)
  `GHSA-mqw7-c5gg-xq97`, `CVE-2025-68698` · Maven `net.gleske:jervis`: affected `<2.2`, fixed in `2.2` · CVSS 8.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping](https://agentprime.io/advisories/CVE-2026-0510.md)
  `CVE-2026-0510` · CVE record: SAP_SE NW AS Java UME User Mapping · CVSS 3.0 Low · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Weblate command-line client susceptible to SSL verification skip](https://agentprime.io/advisories/GHSA-2mmv-7rrp-g8xh.md)
  `GHSA-2mmv-7rrp-g8xh`, `CVE-2026-22250`, `PYSEC-2026-2051` · PyPI `wlc`: affected `<1.17.0`, fixed in `1.17.0` · CVSS 2.5 Low · Not analysed yet · Published 12 Jan 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in mrvladus Errands](https://agentprime.io/advisories/CVE-2025-71063.md)
  `CVE-2025-71063` · CVE record: mrvladus Errands · CVSS 8.2 High · Not analysed yet · Published 12 Jan 2026 · Tags: Weak cryptography or TLS
- [Spectrum password returned in clear](https://agentprime.io/advisories/CVE-2025-69272.md)
  `CVE-2025-69272` · CVE record: Broadcom DX NetOps Spectrum · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2026 · Tags: Weak cryptography or TLS
- [An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component](https://agentprime.io/advisories/CVE-2025-46070.md)
  `CVE-2025-46070` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jan 2026 · Tags: Weak cryptography or TLS
- [Insecure Transmission Vulnerability in Tenda Wireless Routers](https://agentprime.io/advisories/CVE-2026-22080.md)
  `CVE-2026-22080` · CVE record: Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router · CVSS 8.7 High · Not analysed yet · Published 9 Jan 2026 · Tags: Weak cryptography or TLS
- [Cleartext Transmission Vulnerability in Tenda Wireless Routers](https://agentprime.io/advisories/CVE-2026-22079.md)
  `CVE-2026-22079` · CVE record: Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router · CVSS 8.7 High · Not analysed yet · Published 9 Jan 2026 · Tags: Weak cryptography or TLS
- [libssh global known_hosts override](https://agentprime.io/advisories/CVE-2025-15079.md)
  `CVE-2025-15079` · CVE record: curl curl · CVSS 5.3 Medium · Not analysed yet · Published 8 Jan 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTAxLTA4VDEwOjA4OjEzLjQxMDAwMFoiLCJDVkUtMjAyNS0xNTA3OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTAyLTAyVDA2OjMwOjUzLjAwMDAwMFoiLCJHSFNBLW0zaHEtM3FqOC1jNWZtIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTAyLTAyVDA2OjMwOjUzLjAwMDAwMFoiLCJHSFNBLW0zaHEtM3FqOC1jNWZtIl0>. Everything for agents: <https://agentprime.io/llms.txt>.