<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: homarr</title><description>Every new CVE for homarr.</description><link>https://agentprime.io/</link><item><title>CVE-2026-33510: DOM-Based XSS in Homarr /auth/login Redirect</title><link>https://agentprime.io/advisories/CVE-2026-33510/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33510/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 14:51:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-32602: Homarr has a Race Condition in Invite Token Registration (TOCTOU)</title><link>https://agentprime.io/advisories/CVE-2026-32602/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-32602/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 14:42:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27796: Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)</title><link>https://agentprime.io/advisories/CVE-2026-27796/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27796/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 07 Mar 2026 05:54:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27797: Homarr: Unauthenticated SSRF in rssFeed.ts</title><link>https://agentprime.io/advisories/CVE-2026-27797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27797/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 07 Mar 2026 05:54:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25123: Homarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.ping</title><link>https://agentprime.io/advisories/CVE-2026-25123/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25123/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Feb 2026 21:19:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-67493: Homarr: missing input sanitization and possible privilege escalation through ldap search query injection</title><link>https://agentprime.io/advisories/CVE-2025-67493/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67493/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 21:09:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-64759: Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload</title><link>https://agentprime.io/advisories/CVE-2025-64759/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64759/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Nov 2025 18:44:09 GMT</pubDate><category>CVE</category></item></channel></rss>