<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: dhis2-core</title><description>Every new CVE for dhis2-core.</description><link>https://agentprime.io/</link><item><title>CVE-2026-55083: DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)</title><link>https://agentprime.io/advisories/CVE-2026-55083/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55083/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 18:00:05 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-55082: DHIS2 SQL injection in SQL View filter values</title><link>https://agentprime.io/advisories/CVE-2026-55082/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55082/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 18:43:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55081: DHIS2 Reflected XSS in OpenAPI HTML scope parameter</title><link>https://agentprime.io/advisories/CVE-2026-55081/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55081/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 18:36:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55084: SQL Injection in SqlView Filter Parameter Leading to Arbitrary Database Read</title><link>https://agentprime.io/advisories/CVE-2026-55084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55084/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 18:30:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32060: DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events</title><link>https://agentprime.io/advisories/CVE-2023-32060/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32060/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 14:54:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-31139: DHIS2 Core unrestricted session cookies with Personal Access Tokens</title><link>https://agentprime.io/advisories/CVE-2023-31139/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-31139/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 14:27:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-31138: DHIS2 Core vulnerable to Improper Access Control with PATCH requests</title><link>https://agentprime.io/advisories/CVE-2023-31138/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-31138/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 14:11:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-41947: Cross-site Scripting with user-uploaded files in dhis2-core</title><link>https://agentprime.io/advisories/CVE-2022-41947/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-41947/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Dec 2022 22:14:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-41948: Privilege Chaining with the user admin role in dhis2-core</title><link>https://agentprime.io/advisories/CVE-2022-41948/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-41948/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Dec 2022 22:14:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-41949: Semi-blind Server-Side Request Forgery in dhis2-core</title><link>https://agentprime.io/advisories/CVE-2022-41949/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-41949/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Dec 2022 21:57:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-24848: SQL Injection in DHIS2&apos;s in OrgUnit program association</title><link>https://agentprime.io/advisories/CVE-2022-24848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-24848/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jun 2022 17:20:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41187: SQL Injection in DHIS2 Tracker API</title><link>https://agentprime.io/advisories/CVE-2021-41187/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41187/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Nov 2021 21:20:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-39179: SQL Injection in DHIS2 Tracker API</title><link>https://agentprime.io/advisories/CVE-2021-39179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-39179/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Oct 2021 13:20:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-32704: Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;) in dhis2-core</title><link>https://agentprime.io/advisories/CVE-2021-32704/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-32704/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Jun 2021 16:10:10 GMT</pubDate><category>CVE</category></item></channel></rss>