<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: canva</title><description>Every new CVE for canva.</description><link>https://agentprime.io/</link><item><title>CVE-2026-90860: Canva: The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned…</title><link>https://agentprime.io/advisories/CVE-2026-90860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90860/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Sep 2026 06:43:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-92839: Canva Desktop before v1.125.0 performed double decoding in the deeplink handler.</title><link>https://agentprime.io/advisories/CVE-2026-92839/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92839/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 03:53:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85094: Canva: The Canva Android App before 2.376.0 did not restrict the headers returned to an external…</title><link>https://agentprime.io/advisories/CVE-2026-85094/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85094/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:02:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85085: Canva: The Canva Android App before 2.376.0 allowed an external origin to be loaded in a…</title><link>https://agentprime.io/advisories/CVE-2026-85085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85085/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-12792: Incorrect default permissions in Canva</title><link>https://agentprime.io/advisories/CVE-2025-12792/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12792/</guid><description>CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 00:18:00 GMT</pubDate><category>CVE</category></item></channel></rss>