<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: activepieces</title><description>Every new CVE for activepieces.</description><link>https://agentprime.io/</link><item><title>CVE-2026-73084: Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-73084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73084/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 16:35:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73083: Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading</title><link>https://agentprime.io/advisories/CVE-2026-73083/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73083/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 16:33:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73082: Activepieces: Server-side request forgery in MCP tool validation endpoint</title><link>https://agentprime.io/advisories/CVE-2026-73082/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73082/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 16:30:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73081: Activepieces: Remote Code Execution via Command Injection in Code Step Name</title><link>https://agentprime.io/advisories/CVE-2026-73081/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73081/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 16:28:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48499: Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache</title><link>https://agentprime.io/advisories/CVE-2026-48499/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48499/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 17:10:28 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-53535: Activepieces: Arbitrary file write in git-sync via path traversal and symlinks</title><link>https://agentprime.io/advisories/CVE-2026-53535/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53535/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 18:52:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53536: Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL</title><link>https://agentprime.io/advisories/CVE-2026-53536/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53536/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 18:48:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12813: activepieces File URL file.ts handleUrlFile server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-12813/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12813/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 21 Jun 2026 22:30:09 GMT</pubDate><category>CVE</category></item></channel></rss>