<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: libevent</title><description>Every new CVE for libevent.</description><link>https://agentprime.io/</link><item><title>CVE-2026-63385: Libevent: HTTP header handling bugs create risk of access control bypass.</title><link>https://agentprime.io/advisories/CVE-2026-63385/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63385/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:55:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-63379: Libevent: HTTP Header smuggling</title><link>https://agentprime.io/advisories/CVE-2026-63379/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63379/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:55:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63387: Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response</title><link>https://agentprime.io/advisories/CVE-2026-63387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63387/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:53:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63384: Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.</title><link>https://agentprime.io/advisories/CVE-2026-63384/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63384/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:53:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63380: Libevent: Null Pointer Dereference in `evws_new_session`</title><link>https://agentprime.io/advisories/CVE-2026-63380/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63380/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:52:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63382: libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling</title><link>https://agentprime.io/advisories/CVE-2026-63382/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63382/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:51:15 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-63381: Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`</title><link>https://agentprime.io/advisories/CVE-2026-63381/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63381/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:50:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63495: Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames</title><link>https://agentprime.io/advisories/CVE-2026-63495/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63495/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:49:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63383: Libevent: decode_tag_internal() can lead to out-of-bounds read</title><link>https://agentprime.io/advisories/CVE-2026-63383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63383/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:48:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63388: Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept</title><link>https://agentprime.io/advisories/CVE-2026-63388/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63388/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 17:44:18 GMT</pubDate><category>CVE</category></item></channel></rss>