agentprime: aces-lorisEvery new CVE for aces-loris.https://agentprime.io/CVE-2026-55146: LORIS has incorrect access checks in issue_trackerhttps://agentprime.io/advisories/CVE-2026-55146/https://agentprime.io/advisories/CVE-2026-55146/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 21:32:36 GMTCVECVE-2026-55147: LORIS has incorrect access checks in API for Imaging Browserhttps://agentprime.io/advisories/CVE-2026-55147/https://agentprime.io/advisories/CVE-2026-55147/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 21:29:38 GMTCVECVE-2026-39985: LORIS has an open redirect field on loginhttps://agentprime.io/advisories/CVE-2026-39985/https://agentprime.io/advisories/CVE-2026-39985/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 17:08:49 GMTCVECVE-2026-35446: LORIS has a path traversal in FilesDownloadHandlerhttps://agentprime.io/advisories/CVE-2026-35446/https://agentprime.io/advisories/CVE-2026-35446/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:28:30 GMTCVECVE-2026-35403: LORIS has potential cross-site scripting in survey_accounts modulehttps://agentprime.io/advisories/CVE-2026-35403/https://agentprime.io/advisories/CVE-2026-35403/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:27:17 GMTCVECVE-2026-35400: LORIS incorrectly trusts user input in publication modulehttps://agentprime.io/advisories/CVE-2026-35400/https://agentprime.io/advisories/CVE-2026-35400/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:26:09 GMTCVECVE-2026-35169: LORIS has potential cross-site scripting in help_editor modulehttps://agentprime.io/advisories/CVE-2026-35169/https://agentprime.io/advisories/CVE-2026-35169/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:24:27 GMTCVECVE-2026-35165: LORIS has incorrect access checks in document_repositoryhttps://agentprime.io/advisories/CVE-2026-35165/https://agentprime.io/advisories/CVE-2026-35165/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:23:34 GMTCVECVE-2026-34985: LORIS has incorrect access checks in media modulehttps://agentprime.io/advisories/CVE-2026-34985/https://agentprime.io/advisories/CVE-2026-34985/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:22:09 GMTCVECVE-2026-34392: LORIS has a path traversal in static routerhttps://agentprime.io/advisories/CVE-2026-34392/https://agentprime.io/advisories/CVE-2026-34392/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 17:57:35 GMTCVECVE-2026-33350: LORIS has a SQL injection in MRI feedback popuphttps://agentprime.io/advisories/CVE-2026-33350/https://agentprime.io/advisories/CVE-2026-33350/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 17:47:32 GMTCVECVE-2026-26985: LORIS vulnerable to path traversal in electrophysiology_browserhttps://agentprime.io/advisories/CVE-2026-26985/https://agentprime.io/advisories/CVE-2026-26985/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 21:26:00 GMTCVECVE-2026-26984: LORIS media module vulnerable to remote code executionhttps://agentprime.io/advisories/CVE-2026-26984/https://agentprime.io/advisories/CVE-2026-26984/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 21:15:54 GMTCVE