agentprime: hexpm-hex-pmEvery new CVE for hexpm-hex-pm.https://agentprime.io/CVE-2026-21622: Password Reset Tokens Do Not Expirehttps://agentprime.io/advisories/CVE-2026-21622/https://agentprime.io/advisories/CVE-2026-21622/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 21:18:03 GMTCVEcriticalCVE-2026-21621: Improper Scope Enforcement in OAuth client_credentials Flow Allows Read-Only API Key to Escalate to Full Accesshttps://agentprime.io/advisories/CVE-2026-21621/https://agentprime.io/advisories/CVE-2026-21621/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 19:20:05 GMTCVECVE-2026-21618: Cross-site scripting (XSS) in OAuth Device Authorization screenhttps://agentprime.io/advisories/CVE-2026-21618/https://agentprime.io/advisories/CVE-2026-21618/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Jan 2026 14:22:46 GMTCVE