<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: cleanuparr</title><description>Every new CVE for cleanuparr.</description><link>https://agentprime.io/</link><item><title>CVE-2026-44184: Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads</title><link>https://agentprime.io/advisories/CVE-2026-44184/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44184/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 17:33:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44183: Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled</title><link>https://agentprime.io/advisories/CVE-2026-44183/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44183/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 17:32:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-32702: Cleanuparr has Username Enumeration via Timing Attack</title><link>https://agentprime.io/advisories/CVE-2026-32702/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-32702/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Mar 2026 21:09:00 GMT</pubDate><category>CVE</category></item></channel></rss>