# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper signature verification in Apple macOS](https://agentprime.io/advisories/CVE-2026-20699.md)
  `CVE-2026-20699` · CVE record: Apple macOS · CVSS 6.2 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS
- [An issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive information via the cryptographic scheme.](https://agentprime.io/advisories/CVE-2024-51346.md)
  `CVE-2024-51346` · CVE record · CVSS 7.7 High · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS
- [NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching](https://agentprime.io/advisories/GHSA-3f24-pcvm-5jqc.md)
  `GHSA-3f24-pcvm-5jqc`, `BIT-nats-2026-33248`, `CVE-2026-33248`, `GO-2026-4828` · Go `github.com/nats-io/nats-server` and 1 more: affected `*`, no fixed version yet · CVSS 4.2 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [mod_gnutls missing key purpose check in client certificate verification](https://agentprime.io/advisories/CVE-2026-33308.md)
  `CVE-2026-33308` · CVE record: airtower-luna mod_gnutls · CVSS 6.8 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Weak cryptography or TLS
- [HybridAuth Has Improper SSL Certificate Validation in Curl HTTP Client](https://agentprime.io/advisories/GHSA-r3hf-q3mf-7h6w.md)
  `GHSA-r3hf-q3mf-7h6w`, `CVE-2026-4587`, `PKSA-27jb-7jhc-ynjm` · Packagist `hybridauth/hybridauth`: affected `<=3.12.2`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission](https://agentprime.io/advisories/CVE-2026-4584.md)
  `CVE-2026-4584` · CVE record: Shenzhen HCC Technology MPOS M6 PLUS · CVSS 2.3 Low · Not analysed yet · Published 23 Mar 2026 · Tags: Weak cryptography or TLS, CWE-310
- [jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic](https://agentprime.io/advisories/GHSA-wvqx-v3f6-w8rh.md)
  `GHSA-wvqx-v3f6-w8rh`, `CVE-2026-4600` · npm `jsrsasign`: affected `<11.1.1`, fixed in `11.1.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Mar 2026 · Tags: Weak cryptography or TLS
- [jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation](https://agentprime.io/advisories/GHSA-5jx8-q4cp-rhh6.md)
  `GHSA-5jx8-q4cp-rhh6`, `CVE-2026-4599` · npm `jsrsasign`: affected `>=7.0.0, <11.1.1`, fixed in `11.1.1` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Mar 2026 · Tags: Weak cryptography or TLS, CWE-1023
- [PuTTY Ed25519 Signature ecc-ssh.c eddsa_verify signature verification](https://agentprime.io/advisories/CVE-2026-4115.md)
  `CVE-2026-4115` · CVE record: PuTTY · CVSS 6.3 Medium · Not analysed yet · Published 22 Mar 2026 · Tags: Weak cryptography or TLS, CWE-345
- [janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification](https://agentprime.io/advisories/CVE-2026-4541.md)
  `CVE-2026-4541` · CVE record: janmojzis tinyssh · CVSS 2.0 Low · Not analysed yet · Published 22 Mar 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-24060.md)
  `CVE-2026-24060` · CVE record: Automated Logic WebCTRL Premium Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2026 · Tags: Weak cryptography or TLS
- [AVideo has an unauthenticated decrypt oracle leaking any ciphertext](https://agentprime.io/advisories/GHSA-mwjc-5j4x-r686.md)
  `GHSA-mwjc-5j4x-r686`, `CVE-2026-33512`, `PKSA-stv4-sw5c-pp7h` · Packagist `wwbn/avideo`: affected `<=26.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2026 · Tags: Authentication bypass, Information disclosure, Weak cryptography or TLS
- [AVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl Plugin](https://agentprime.io/advisories/GHSA-6m5f-j7w2-w953.md)
  `GHSA-6m5f-j7w2-w953`, `CVE-2026-33488`, `PKSA-qjdg-5npg-72ng` · Packagist `wwbn/avideo`: affected `<=26.0`, no fixed version yet · CVSS 7.4 High · Not analysed yet · Published 20 Mar 2026 · Tags: Weak cryptography or TLS
- [Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes](https://agentprime.io/advisories/CVE-2026-32309.md)
  `CVE-2026-32309` · CVE record: cryptomator cryptomator · CVSS 8.7 High · Not analysed yet · Published 20 Mar 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Devolutions Server](https://agentprime.io/advisories/CVE-2026-4434.md)
  `CVE-2026-4434` · CVE record: Devolutions Server · CVSS 8.1 High · Not analysed yet · Published 20 Mar 2026 · Tags: Weak cryptography or TLS
- [Yi Technology YI Home Camera HTTP Firmware Update ipc signature verification](https://agentprime.io/advisories/CVE-2026-4478.md)
  `CVE-2026-4478` · CVE record: Yi Technology YI Home Camera · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS](https://agentprime.io/advisories/CVE-2026-32891.md)
  `CVE-2026-32891` · CVE record: openVESSL Anchorr · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2026 · Tags: Cross-site scripting (XSS), Weak cryptography or TLS, CWE-212
- [MinIO has JWT Algorithm Confusion in OIDC Authentication](https://agentprime.io/advisories/GHSA-5cx5-wh4m-82fh.md)
  `GHSA-5cx5-wh4m-82fh`, `CVE-2026-33322`, `GO-2026-4779` · Go `github.com/minio/minio`: affected `<=0.0.0-20260212201848-7aac2a2c5b7c`, no fixed version yet · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)](https://agentprime.io/advisories/GHSA-q4r8-xm5f-56gw.md)
  `GHSA-q4r8-xm5f-56gw`, `CVE-2026-30836`, `GO-2026-4775` · Go `github.com/smallstep/certificates`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Unsigned SAML LogoutRequest Acceptance in gosaml2](https://agentprime.io/advisories/GHSA-pcgw-qcv5-h8ch.md)
  `GHSA-pcgw-qcv5-h8ch`, `GO-2026-4764` · Go `github.com/russellhaering/gosaml2`: affected `<0.11.0`, fixed in `0.11.0` · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: Weak cryptography or TLS
- [validateSignature Loop Variable Capture Signature Bypass in goxmldsig](https://agentprime.io/advisories/GHSA-479m-364c-43vc.md)
  `GHSA-479m-364c-43vc`, `CVE-2026-33487`, `GO-2026-4753` · Go `github.com/russellhaering/goxmldsig`: affected `<1.6.0`, fixed in `1.6.0` · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: Weak cryptography or TLS, CWE-682
- [Improper certificate validation in Devolutions Hub Reporting Service](https://agentprime.io/advisories/CVE-2026-4396.md)
  `CVE-2026-4396` · CVE record: Devolutions Hub Reporting Service · CVSS 8.3 High · Not analysed yet · Published 18 Mar 2026 · Tags: Weak cryptography or TLS
- [Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121](https://agentprime.io/advisories/GHSA-594f-3595-c47v.md)
  `GHSA-594f-3595-c47v`, `GO-2026-4737` · Go `github.com/argoproj-labs/terraform-provider-argocd`: affected `<1.2.3-0.20260316182343-b3364f3f32e7`, fixed in `1.2.3-0.20260316182343-b3364f3f32e7` · CVSS 4.8 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Weak cryptography or TLS, CWE-1395
- [Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP](https://agentprime.io/advisories/CVE-2026-32838.md)
  `CVE-2026-32838` · CVE record: EDIMAX Technology Co., Ltd. Edimax GS-5008PL · CVSS 8.7 High · Not analysed yet · Published 17 Mar 2026 · Tags: Weak cryptography or TLS
- [JetKVM insufficient firmware verification](https://agentprime.io/advisories/CVE-2026-32294.md)
  `CVE-2026-32294` · CVE record: JetKVM JetKVM · CVSS 7.0 High · Not analysed yet · Published 17 Mar 2026 · Tags: Weak cryptography or TLS, CWE-345
- [GL-iNet Comet (GL-RM1) KVM insufficient certificate validation](https://agentprime.io/advisories/CVE-2026-32293.md)
  `CVE-2026-32293` · CVE record: GL-iNet Comet KVM · CVSS 6.3 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Weak cryptography or TLS
- [ScreenConnect Instance Level Cryptographic Material Exposure](https://agentprime.io/advisories/CVE-2026-3564.md)
  `CVE-2026-3564` · CVE record: ConnectWise ScreenConnect · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Mar 2026 · Tags: Weak cryptography or TLS
- [sjcl is missing point-on-curve validation in sjcl.ecc.basicKey.publicKey](https://agentprime.io/advisories/GHSA-2w8x-224x-785m.md)
  `GHSA-2w8x-224x-785m`, `CVE-2026-4258` · npm `sjcl`: affected `<1.0.9`, fixed in `1.0.9` · CVSS 8.7 High · Not analysed yet · Published 17 Mar 2026 · Tags: Weak cryptography or TLS, CWE-325
- [Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle](https://agentprime.io/advisories/GHSA-7432-952r-cw78.md)
  `GHSA-7432-952r-cw78`, `CVE-2026-28490`, `PYSEC-2026-2116` · PyPI `authlib`: affected `<1.6.9`, fixed in `1.6.9` · CVSS 8.3 High · Not analysed yet · Published 16 Mar 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [Authlib JWS JWK Header Injection: Signature Verification Bypass](https://agentprime.io/advisories/GHSA-wvwj-cvrp-7pv5.md)
  `GHSA-wvwj-cvrp-7pv5`, `CVE-2026-27962`, `PYSEC-2026-287` · PyPI `authlib`: affected `<1.6.9`, fixed in `1.6.9` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Mar 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in HCL AION](https://agentprime.io/advisories/CVE-2025-52648.md)
  `CVE-2025-52648` · CVE record: HCL AION · CVSS 4.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Weak cryptography or TLS
- [OpenClaw: Feishu webhook mode accepted forged events when only \`verificationToken\` was configured](https://agentprime.io/advisories/GHSA-g353-mgv3-8pcj.md)
  `GHSA-g353-mgv3-8pcj`, `CVE-2026-32974` · npm `openclaw`: affected `<2026.3.12`, fixed in `2026.3.12` · CVSS 8.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy](https://agentprime.io/advisories/CVE-2026-32627.md)
  `CVE-2026-32627` · CVE record: yhirose cpp-httplib · CVSS 8.7 High · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-3562.md)
  `CVE-2026-3562` · CVE record: Philips Hue Bridge · CVSS 6.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [PyJWT accepts unknown \`crit\` header extensions](https://agentprime.io/advisories/GHSA-752w-5fwx-jx9f.md)
  `GHSA-752w-5fwx-jx9f`, `CVE-2026-32597`, `PYSEC-2026-120` · PyPI `pyjwt`: affected `<2.12.0`, fixed in `2.12.0` · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS, Broken access control, CWE-345
- [JumpServer Improper Certificate Validation in Custom SMS API Client](https://agentprime.io/advisories/CVE-2026-31798.md)
  `CVE-2026-31798` · CVE record: jumpserver jumpserver · CVSS 5.0 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [IBM Sterling Partner Engagement Manager Information Disclosure](https://agentprime.io/advisories/CVE-2025-13718.md)
  `CVE-2025-13718` · CVE record: IBM Sterling Partner Engagement Manager · CVSS 3.7 Low · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [SM9 Infinity-Point Ciphertext Forgery Vulnerability](https://agentprime.io/advisories/GHSA-5xxp-2vrj-x855.md)
  `GHSA-5xxp-2vrj-x855`, `CVE-2026-32614`, `GO-2026-4694` · Go `github.com/emmansun/gmsm`: affected `<0.41.1`, fixed in `0.41.1` · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS, CWE-20
- [Poseidon V1 variable-length input collision via implicit zero-padding](https://agentprime.io/advisories/GHSA-g2p6-hh5v-7hfm.md)
  `GHSA-g2p6-hh5v-7hfm`, `CVE-2026-32129` · crates.io `soroban-poseidon`: affected `<25.0.1`, fixed in `25.0.1` · CVSS 8.7 High · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge](https://agentprime.io/advisories/CVE-2026-28252.md)
  `CVE-2026-28252` · CVE record: Trane Tracer SC and 2 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Lenovo FileZ](https://agentprime.io/advisories/CVE-2026-2368.md)
  `CVE-2026-2368` · CVE record: Lenovo FileZ · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Lenovo FileZ](https://agentprime.io/advisories/CVE-2026-1068.md)
  `CVE-2026-1068` · CVE record: Lenovo FileZ · CVSS 6.0 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Alienware Command Center (AWCC)](https://agentprime.io/advisories/CVE-2026-24508.md)
  `CVE-2026-24508` · CVE record: Dell Alienware Command Center (AWCC) · CVSS 2.5 Low · Not analysed yet · Published 11 Mar 2026 · Tags: Weak cryptography or TLS
- [Striae has a hash validation utility vulnerability](https://agentprime.io/advisories/GHSA-mmf8-487q-p45m.md)
  `GHSA-mmf8-487q-p45m`, `CVE-2026-31839` · npm `@striae-org/striae`: affected `>=0.9.22-0, <3.0.0`, fixed in `3.0.0` · CVSS 8.2 High · Not analysed yet · Published 11 Mar 2026 · Tags: Weak cryptography or TLS, CWE-353, CWE-354
- [Video Station](https://agentprime.io/advisories/CVE-2024-14024.md)
  `CVE-2024-14024` · CVE record: QNAP Systems Inc. Video Station · CVSS 0.1 Low · Not analysed yet · Published 11 Mar 2026 · Tags: Weak cryptography or TLS
- [Terraform Provider for SendGrid: TLS Session Resumption Bypasses Certificate Authority Trust Store Modifications in Go](https://agentprime.io/advisories/GHSA-j443-wcqq-xprh.md)
  `GHSA-j443-wcqq-xprh`, `GO-2026-4673` · Go `github.com/arslanbekov/terraform-provider-sendgrid`: affected `<=1.1.3-0.20250606002314-b4a2dfeb7b0f`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2026 · Tags: Weak cryptography or TLS
- [Acrobat Reader | Improper Certificate Validation (CWE-295)](https://agentprime.io/advisories/CVE-2026-27221.md)
  `CVE-2026-27221` · CVE record: Adobe Acrobat DC and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Weak cryptography or TLS
- [Azure IoT Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-23662.md)
  `CVE-2026-23662` · CVE record: Microsoft Azure IoT Explorer · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Azure IoT Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-23661.md)
  `CVE-2026-23661` · CVE record: Microsoft Azure IoT Explorer · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Fortinet FortiAnalyzer and others](https://agentprime.io/advisories/CVE-2025-68482.md)
  `CVE-2025-68482` · CVE record: Fortinet FortiAnalyzer and 3 more · CVSS 6.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Weak cryptography or TLS
- [Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer](https://agentprime.io/advisories/CVE-2025-41711.md)
  `CVE-2025-41711` · CVE record: Janitza UMG 96RM-E 24V(5222063) and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Weak cryptography or TLS
- [HTTP signature verification can be bypassed](https://agentprime.io/advisories/CVE-2026-28432.md)
  `CVE-2026-28432` · CVE record: misskey-dev misskey · CVSS 7.1 High · Not analysed yet · Published 9 Mar 2026 · Tags: Weak cryptography or TLS
- [Signature bypass on update upload](https://agentprime.io/advisories/CVE-2025-41767.md)
  `CVE-2025-41767` · CVE record: MBS UBR-01 Mk II and 2 more · CVSS 7.2 High · Not analysed yet · Published 9 Mar 2026 · Tags: Weak cryptography or TLS
- [Secret leak with wwwdnload.cgi](https://agentprime.io/advisories/CVE-2025-41762.md)
  `CVE-2025-41762` · CVE record: MBS UBR-01 Mk II and 2 more · CVSS 6.2 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Weak cryptography or TLS
- [Taipower｜Taipower APP(Android) - Improper Certificate Validation](https://agentprime.io/advisories/CVE-2026-3822.md)
  `CVE-2026-3822` · CVE record: Taipower Taipower APP · CVSS 8.3 High · Not analysed yet · Published 9 Mar 2026 · Tags: Weak cryptography or TLS
- [An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2.](https://agentprime.io/advisories/CVE-2025-70048.md)
  `CVE-2025-70048` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Mar 2026 · Tags: Weak cryptography or TLS
- [mkj Dropbear S Range Check curve25519.c unpackneg signature verification](https://agentprime.io/advisories/CVE-2026-3706.md)
  `CVE-2026-3706` · CVE record: mkj Dropbear · CVSS 6.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission](https://agentprime.io/advisories/CVE-2026-2671.md)
  `CVE-2026-2671` · CVE record: Mendi Neurofeedback Headset · CVSS 2.3 Low · Not analysed yet · Published 7 Mar 2026 · Tags: Weak cryptography or TLS, CWE-310
- [Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager](https://agentprime.io/advisories/GHSA-7xrh-hqfc-g7qr.md)
  `GHSA-7xrh-hqfc-g7qr`, `BIT-zookeeper-2026-24281`, `CVE-2026-24281` · Maven `org.apache.zookeeper:zookeeper`: affected `>=3.8.0, <3.8.6 || >=3.9.0, <3.9.5`, fixed in `3.8.6`, `3.9.5` · CVSS 7.4 High · Not analysed yet · Published 7 Mar 2026 · Tags: Weak cryptography or TLS, CWE-350
- [Wallos: Server-Side Request Forgery (SSRF) in Notification Testers](https://agentprime.io/advisories/CVE-2026-30840.md)
  `CVE-2026-30840` · CVE record: ellite Wallos · CVSS 8.8 High · Not analysed yet · Published 7 Mar 2026 · Tags: Weak cryptography or TLS, Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTAzLTA3VDA1OjM5OjQwLjg1NDAwMFoiLCJDVkUtMjAyNi0zMDg0MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTAzLTI1VDE2OjA4OjAxLjkxNzAwMFoiLCJDVkUtMjAyNi0yMDExNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTAzLTI1VDE2OjA4OjAxLjkxNzAwMFoiLCJDVkUtMjAyNi0yMDExNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.