<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: apache-software-foundation-apache-fory</title><description>Every new CVE for apache-software-foundation-apache-fory.</description><link>https://agentprime.io/</link><item><title>CVE-2026-71559: Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata</title><link>https://agentprime.io/advisories/CVE-2026-71559/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71559/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 08:56:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71558: Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization</title><link>https://agentprime.io/advisories/CVE-2026-71558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71558/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 08:54:56 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-71560: Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path</title><link>https://agentprime.io/advisories/CVE-2026-71560/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71560/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 08:53:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-60080: Apache Fory: Rust MetaString heap use-after-free</title><link>https://agentprime.io/advisories/CVE-2026-60080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-60080/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 10:54:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-64606: Apache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interface</title><link>https://agentprime.io/advisories/CVE-2026-64606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-64606/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 10:43:51 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-64609: Apache Fory, Apache Fory: Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserialization</title><link>https://agentprime.io/advisories/CVE-2026-64609/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-64609/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 09:34:57 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-64608: Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths</title><link>https://agentprime.io/advisories/CVE-2026-64608/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-64608/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 09:34:12 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>