agentprime: hexpmEvery new CVE for hexpm.https://agentprime.io/CVE-2026-86698: Refresh tokens accepted as private repository credentials at the CDNhttps://agentprime.io/advisories/CVE-2026-86698/https://agentprime.io/advisories/CVE-2026-86698/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 15:51:57 GMTCVECVE-2026-75554: Explicit organization scopes survive token refresh after membership endshttps://agentprime.io/advisories/CVE-2026-75554/https://agentprime.io/advisories/CVE-2026-75554/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 20:15:05 GMTCVECVE-2026-75542: OAuth token exchange grants repository scopes for organizations the principal cannot accesshttps://agentprime.io/advisories/CVE-2026-75542/https://agentprime.io/advisories/CVE-2026-75542/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 20:14:30 GMTCVECVE-2026-23940: Denial of Service via Oversized Package Uploadhttps://agentprime.io/advisories/CVE-2026-23940/https://agentprime.io/advisories/CVE-2026-23940/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 16:07:53 GMTCVECVE-2026-21622: Password Reset Tokens Do Not Expirehttps://agentprime.io/advisories/CVE-2026-21622/https://agentprime.io/advisories/CVE-2026-21622/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 21:18:03 GMTCVEcriticalCVE-2026-21621: Improper Scope Enforcement in OAuth client_credentials Flow Allows Read-Only API Key to Escalate to Full Accesshttps://agentprime.io/advisories/CVE-2026-21621/https://agentprime.io/advisories/CVE-2026-21621/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 19:20:05 GMTCVECVE-2026-23939: Path Traversal in Local File Store Backendhttps://agentprime.io/advisories/CVE-2026-23939/https://agentprime.io/advisories/CVE-2026-23939/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 19:41:18 GMTCVECVE-2026-21618: Cross-site scripting (XSS) in OAuth Device Authorization screenhttps://agentprime.io/advisories/CVE-2026-21618/https://agentprime.io/advisories/CVE-2026-21618/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Jan 2026 14:22:46 GMTCVE