# XML external entities (XXE).

XML parsers made to read files or reach other hosts. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026](https://agentprime.io/advisories/CVE-2026-13107.md)
  `CVE-2026-13107` · CVE record: IBM Business Automation Workflow containers and traditional · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: XML external entities (XXE)
- [DataStage on Cloud Pak for Data has several vulnerabilities due to open source software](https://agentprime.io/advisories/CVE-2026-16432.md)
  `CVE-2026-16432` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 7.7 High · Not analysed yet · Published 14 Sept 2026 · Tags: XML external entities (XXE)
- [Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin](https://agentprime.io/advisories/CVE-2026-18061.md)
  `CVE-2026-18061` · CVE record: AWS AWS Advanced JDBC Wrapper · CVSS 6.0 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: XML external entities (XXE)
- [MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint](https://agentprime.io/advisories/CVE-2026-89260.md)
  `CVE-2026-89260` · CVE record: moxi624 MoguBlog · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: XML external entities (XXE)
- [NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/CVE-2026-82578.md)
  `CVE-2026-82578` · CVE record: NextGen Healthcare Mirth Connect · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: XML external entities (XXE)
- [NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/CVE-2026-78224.md)
  `CVE-2026-78224` · CVE record: NextGen Healthcare Mirth Connect · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: XML external entities (XXE)
- [XML External Entity in Akana API Platform](https://agentprime.io/advisories/CVE-2026-89212.md)
  `CVE-2026-89212` · CVE record: Perforce Akana · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: XML external entities (XXE)
- [Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read](https://agentprime.io/advisories/CVE-2026-84941.md)
  `CVE-2026-84941` · CVE record: TP-Link Systems Inc. Omada Software Controller (Windows) and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: XML external entities (XXE)
- [OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host](https://agentprime.io/advisories/CVE-2026-19596.md)
  `CVE-2026-19596` · CVE record: The OpenNMS Group Meridian and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: XML external entities (XXE)
- [XML External Entity (XXE) Injection in CyberELF NanoXML](https://agentprime.io/advisories/CVE-2026-19614.md)
  `CVE-2026-19614` · CVE record: CyberELF NanoXML · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: XML external entities (XXE)
- [XXE Vulnerability in Cosminexus Component Container](https://agentprime.io/advisories/CVE-2026-71375.md)
  `CVE-2026-71375` · CVE record: Hitachi Cosminexus Component Container · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2026 · Tags: XML external entities (XXE)
- [XML External Entity (XXE) Vulnerability in SAP Integration Suite](https://agentprime.io/advisories/CVE-2026-76958.md)
  `CVE-2026-76958` · CVE record: SAP_SE SAP Integration Suite · CVSS 8.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: XML external entities (XXE)
- [An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via su…](https://agentprime.io/advisories/CVE-2026-79572.md)
  `CVE-2026-79572` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: XML external entities (XXE)
- [IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs](https://agentprime.io/advisories/CVE-2026-17443.md)
  `CVE-2026-17443` · CVE record: IBM App Connect Enterprise and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: XML external entities (XXE)
- [IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs](https://agentprime.io/advisories/CVE-2026-17444.md)
  `CVE-2026-17444` · CVE record: IBM App Connect Enterprise and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: XML external entities (XXE)
- [IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs](https://agentprime.io/advisories/CVE-2026-81832.md)
  `CVE-2026-81832` · CVE record: IBM App Connect Enterprise and 1 more · CVSS 7.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: XML external entities (XXE)
- [Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing](https://agentprime.io/advisories/CVE-2026-82525.md)
  `CVE-2026-82525` · CVE record: Exterro FTK Imager · CVSS 6.8 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: XML external entities (XXE), CWE-829
- [XML external entity injection in Keyence Corporation XG-X VisionTerminal and others](https://agentprime.io/advisories/CVE-2026-82918.md)
  `CVE-2026-82918` · CVE record: Keyence Corporation XG-X VisionTerminal and 3 more · CVSS 6.7 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: XML external entities (XXE)
- [Resteasy-core: resteasy sourceprovider remote unauthenticated file read](https://agentprime.io/advisories/CVE-2026-17615.md)
  `CVE-2026-17615` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2026 · Tags: XML external entities (XXE)
- [YaCy Search Server through 1.941 XML External Entity Injection via Parsers](https://agentprime.io/advisories/CVE-2026-82880.md)
  `CVE-2026-82880` · CVE record: yacy yacy_search_server · CVSS 8.7 High · Not analysed yet · Published 31 Aug 2026 · Tags: XML external entities (XXE)
- [MapFish Print has XXE that allows reading arbitrary files of certain types](https://agentprime.io/advisories/GHSA-5v29-34h8-v68r.md)
  `GHSA-5v29-34h8-v68r`, `CVE-2026-55848` · Maven `org.mapfish.print:print-lib` and 2 more: affected `>=3.0.0, <3.28.30 || >=3.29.0, <3.30.32 || >=3.32.0, <3.33.16 || >=3.34.0, <4.0.5`, fixed in `3.28.30`, `3.30.32`, `3.33.16`, `4.0.5` · CVSS 8.6 High · Not analysed yet · Published 28 Aug 2026 · Tags: XML external entities (XXE)
- [pkp pkp-lib XSLTransformer.php \_transformPHP xml external entity reference](https://agentprime.io/advisories/CVE-2026-76572.md)
  `CVE-2026-76572` · CVE record: pkp pkp-lib · CVSS 5.1 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: XML external entities (XXE), CWE-610
- [XML external entity injection in Cisco BroadWorks](https://agentprime.io/advisories/CVE-2026-20320.md)
  `CVE-2026-20320` · CVE record: Cisco Cisco BroadWorks · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in Dell Command Update (DCU)](https://agentprime.io/advisories/CVE-2026-67268.md)
  `CVE-2026-67268` · CVE record: Dell Dell Command Update (DCU) · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-70423.md)
  `CVE-2026-70423` · CVE record: Dell OpenManage Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2026-75058.md)
  `CVE-2026-75058` · CVE record: JetBrains IntelliJ IDEA · CVSS 5.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2026-75055.md)
  `CVE-2026-75055` · CVE record: JetBrains IntelliJ IDEA · CVSS 5.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: XML external entities (XXE)
- [Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint](https://agentprime.io/advisories/CVE-2026-69101.md)
  `CVE-2026-69101` · CVE record: datavane tis · CVSS 8.3 High · Not analysed yet · Published 14 Aug 2026 · Tags: XML external entities (XXE)
- [IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty](https://agentprime.io/advisories/CVE-2026-18715.md)
  `CVE-2026-18715` · CVE record: IBM i · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in Eclipse Foundation Eclipse RDF4J](https://agentprime.io/advisories/CVE-2026-15803.md)
  `CVE-2026-15803` · CVE record: Eclipse Foundation Eclipse RDF4J · CVSS 8.7 High · Not analysed yet · Published 12 Aug 2026 · Tags: XML external entities (XXE)
- [XXE in Ministry of Justice's UYAP Document Editor](https://agentprime.io/advisories/CVE-2026-16999.md)
  `CVE-2026-16999` · CVE record: Ministry of Justice UYAP Document Editor · CVSS 6.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: XML external entities (XXE)
- [FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser](https://agentprime.io/advisories/CVE-2026-73235.md)
  `CVE-2026-73235` · CVE record: FreeCAD FreeCAD · CVSS 6.1 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: XML external entities (XXE)
- [XML External Entity Injection in SAP BusinessObjects Business Intelligence](https://agentprime.io/advisories/CVE-2026-58248.md)
  `CVE-2026-58248` · CVE record: SAP_SE SAP BusinessObjects Business Intelligence · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: XML external entities (XXE)
- [JasperReports Server: XXE Injection Vulnerability (Unauthenticated)](https://agentprime.io/advisories/CVE-2026-16626.md)
  `CVE-2026-16626` · CVE record: Jaspersoft JasperReports Server · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: XML external entities (XXE)
- [Apache CXF: XXE via WSDL/XSD import parsing](https://agentprime.io/advisories/CVE-2026-65432.md)
  `CVE-2026-65432` · CVE record: Apache Software Foundation Apache CXF · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in Jenkins Project Jenkins Ivy Report Plugin](https://agentprime.io/advisories/CVE-2026-70448.md)
  `CVE-2026-70448` · CVE record: Jenkins Project Jenkins Ivy Report Plugin · CVSS 7.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: XML external entities (XXE)
- [IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability](https://agentprime.io/advisories/CVE-2026-10025.md)
  `CVE-2026-10025` · CVE record: IBM QRadar · CVSS 8.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in Eclipse Foundation Eclipse Accessibility Tools Framework (ACTF)](https://agentprime.io/advisories/CVE-2026-14304.md)
  `CVE-2026-14304` · CVE record: Eclipse Foundation Eclipse Accessibility Tools Framework (ACTF) · CVSS 4.6 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: XML external entities (XXE)
- [IBM DataPower Gateway affected by XML external entity injection](https://agentprime.io/advisories/CVE-2025-36374.md)
  `CVE-2025-36374` · CVE record: IBM DataPower Gateway 10.6CD and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: XML external entities (XXE)
- [CentreStack < 17.4 XXE via SharePoint Storage Configuration](https://agentprime.io/advisories/CVE-2026-54366.md)
  `CVE-2026-54366` · CVE record: Gladinet CentreStack · CVSS 8.7 High · Not analysed yet · Published 30 Jul 2026 · Tags: XML external entities (XXE)
- [veraPDF-validatio: Use of Default \`DocumentBuilderFactory\` leads to XXE When Processing Untrusted PDFs](https://agentprime.io/advisories/GHSA-cg9x-g3gm-h5h6.md)
  `GHSA-cg9x-g3gm-h5h6`, `CVE-2026-54082` · Maven `org.verapdf:validation-model` and 1 more: affected `>=1.17.35, <1.30.2 || >=1.31.1, <1.31.71`, fixed in `1.30.2`, `1.31.71` · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: XML external entities (XXE)
- [veraPDF Validation XXE via Rich Text](https://agentprime.io/advisories/GHSA-3jh7-wm29-q568.md)
  `GHSA-3jh7-wm29-q568`, `CVE-2026-54078` · Maven `org.verapdf:validation-model` and 1 more: affected `>=1.25.73, <1.30.2 || >=1.31.1, <1.31.71`, fixed in `1.30.2`, `1.31.71` · CVSS 8.7 High · Not analysed yet · Published 29 Jul 2026 · Tags: XML external entities (XXE)
- [veraPDF Validation XXE via XFA](https://agentprime.io/advisories/GHSA-36mm-w85j-3q2j.md)
  `GHSA-36mm-w85j-3q2j`, `CVE-2026-54079` · Maven `org.verapdf:validation-model` and 1 more: affected `>=1.17.35, <1.30.2 || >=1.31.1, <1.31.71`, fixed in `1.30.2`, `1.31.71` · CVSS 8.7 High · Not analysed yet · Published 29 Jul 2026 · Tags: XML external entities (XXE)
- [Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserlist.aspx/GetXmlHttp endpoint.](https://agentprime.io/advisories/CVE-2026-50782.md)
  `CVE-2026-50782` · CVE record · CVSS 7.5 High · Not analysed yet · Published 29 Jul 2026 · Tags: XML external entities (XXE)
- [Improper Restriction of XML External Entity Reference in proCertum SmartSign](https://agentprime.io/advisories/CVE-2026-57917.md)
  `CVE-2026-57917` · CVE record: Asseco proCertum SmartSign · CVSS 4.8 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: XML external entities (XXE)
- [Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling](https://agentprime.io/advisories/GHSA-4qhr-g3c6-fcfx.md)
  `GHSA-4qhr-g3c6-fcfx`, `CVE-2026-56817` · Maven `io.netty:netty-codec-xml`: affected `>=4.2.0.Final, <4.2.16.Final || >=4.1.0.Final, <4.1.136.Final`, fixed in `4.2.16.Final`, `4.1.136.Final` · CVSS 8.3 High · Not analysed yet · Published 22 Jul 2026 · Tags: XML external entities (XXE)
- [XXE in Netcad's NetGIS](https://agentprime.io/advisories/CVE-2026-8396.md)
  `CVE-2026-8396` · CVE record: Netcad Software Inc. NetGIS · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2026 · Tags: XML external entities (XXE)
- [libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.](https://agentprime.io/advisories/CVE-2026-51080.md)
  `CVE-2026-51080` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: XML external entities (XXE)
- [Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)](https://agentprime.io/advisories/CVE-2026-48359.md)
  `CVE-2026-48359` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: XML external entities (XXE)
- [XML external entity injection in Dell Unisphere for PowerMax](https://agentprime.io/advisories/CVE-2026-54470.md)
  `CVE-2026-54470` · CVE record: Dell Unisphere for PowerMax · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: XML external entities (XXE)
- [Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read](https://agentprime.io/advisories/CVE-2026-57259.md)
  `CVE-2026-57259` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: XML external entities (XXE)
- [OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory](https://agentprime.io/advisories/GHSA-7v6w-c3f4-9wpq.md)
  `GHSA-7v6w-c3f4-9wpq`, `CVE-2026-54640` · Maven `io.openremote:openremote-agent`: affected `<1.24.2`, fixed in `1.24.2` · CVSS 7.6 High · Not analysed yet · Published 6 Jul 2026 · Tags: XML external entities (XXE)
- [Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser](https://agentprime.io/advisories/CVE-2026-47898.md)
  `CVE-2026-47898` · CVE record: Apache Software Foundation Apache Lucene.Net · CVSS 4.0 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: XML external entities (XXE)
- [XXE attack in IBM Business Automation Manager Open Editions](https://agentprime.io/advisories/CVE-2026-13449.md)
  `CVE-2026-13449` · CVE record: IBM Business Automation Manager Open Editions · CVSS 7.6 High · Not analysed yet · Published 30 Jun 2026 · Tags: XML external entities (XXE)
- [weixin-python XML External Entity vulnerability](https://agentprime.io/advisories/GHSA-h384-ph77-3699.md)
  `GHSA-h384-ph77-3699`, `CVE-2018-25082`, `PYSEC-2026-572` · PyPI `weixin-python`: affected `<0.5.5`, fixed in `0.5.5` · CVSS 6.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: XML external entities (XXE)
- [Apicurio Registry utilities allow SSRF and denial of service through XML parsing](https://agentprime.io/advisories/GHSA-7g64-f2hm-vjxp.md)
  `GHSA-7g64-f2hm-vjxp`, `CVE-2026-12975` · Maven `io.apicurio:apicurio-registry-schema-util-common`: affected `>=3.3.0, <3.3.1 || <3.2.6`, fixed in `3.3.1`, `3.2.6` · CVSS 8.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: XML external entities (XXE)
- [Duplicate Advisory: Grav is Vulnerable to XXE via SVG Upload](https://agentprime.io/advisories/GHSA-32fw-h446-j4hh.md)
  `GHSA-32fw-h446-j4hh` · Packagist `getgrav/grav`: affected `<2.0.0-beta.2`, fixed in `2.0.0-beta.2` · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: XML external entities (XXE)
- [libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling](https://agentprime.io/advisories/CVE-2026-6653.md)
  `CVE-2026-6653` · CVE record: GNOME libxml2 · CVSS 7.0 High · Not analysed yet · Published 22 Jun 2026 · Tags: Memory corruption, XML external entities (XXE)
- [zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity reference](https://agentprime.io/advisories/CVE-2026-12788.md)
  `CVE-2026-12788` · CVE record: zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: XML external entities (XXE), CWE-610
- [Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247](https://agentprime.io/advisories/GHSA-8678-w3jw-xfc2.md)
  `GHSA-8678-w3jw-xfc2`, `CVE-2026-57234` · RubyGems `nokogiri`: affected `<1.19.4`, fixed in `1.19.4` · CVSS 2.6 Low · Not analysed yet · Published 19 Jun 2026 · Tags: XML external entities (XXE), CWE-178, CWE-184

Newest: <https://agentprime.io/advisories/tag/xxe.md>
Older: <https://agentprime.io/advisories/tag/xxe.md?cursor=WyIyMDI2LTA2LTE5VDE2OjM2OjExLjAwMDAwMFoiLCJHSFNBLTg2NzgtdzNqdy14ZmMyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=xxe&cursor=WyIyMDI2LTA5LTE0VDIxOjA3OjM0LjM1OTAwMFoiLCJDVkUtMjAyNi0xMzI4NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/xxe/?cursor=WyIyMDI2LTA5LTE0VDIxOjA3OjM0LjM1OTAwMFoiLCJDVkUtMjAyNi0xMzI4NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.