<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: growi</title><description>Every new CVE for growi.</description><link>https://agentprime.io/</link><item><title>CVE-2026-115624: Missing authorization in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-115624/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115624/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 02:21:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-109848: Insecure direct object reference in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-109848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-109848/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 02:21:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105272: Insecure direct object reference in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-105272/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105272/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 02:21:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100727: Files accessible to external parties in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-100727/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100727/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 06:36:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84205: GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval</title><link>https://agentprime.io/advisories/CVE-2026-84205/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84205/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 15:18:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84204: GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval</title><link>https://agentprime.io/advisories/CVE-2026-84204/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84204/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 15:18:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53620: Insecure direct object reference in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-53620/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53620/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 31 Aug 2026 06:31:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-68951: Incorrect authorization in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-68951/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-68951/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 31 Aug 2026 06:31:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-80191: GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests</title><link>https://agentprime.io/advisories/CVE-2026-80191/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80191/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Aug 2026 23:18:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41951: Path traversal in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-41951/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41951/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 09:32:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41040: Regular expression denial of service in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-41040/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41040/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Apr 2026 06:59:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-26291: Cross-site scripting in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-26291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26291/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Apr 2026 04:19:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25083: Missing authorization in GROWI</title><link>https://agentprime.io/advisories/CVE-2026-25083/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25083/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Mar 2026 06:47:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-64700: Cross-site request forgery in GROWI</title><link>https://agentprime.io/advisories/CVE-2025-64700/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64700/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 04:06:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61994: Cross-site scripting in GROWI</title><link>https://agentprime.io/advisories/CVE-2025-61994/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61994/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Nov 2025 04:14:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54806: Cross-site scripting in GROWI</title><link>https://agentprime.io/advisories/CVE-2025-54806/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54806/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Oct 2025 04:10:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-43880: Regular expression denial of service in GROWI</title><link>https://agentprime.io/advisories/CVE-2025-43880/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-43880/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Jun 2025 05:31:29 GMT</pubDate><category>CVE</category></item></channel></rss>