agentprime: lightpanda-io-browserEvery new CVE for lightpanda-io-browser.https://agentprime.io/CVE-2026-52842: Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypasshttps://agentprime.io/advisories/CVE-2026-52842/https://agentprime.io/advisories/CVE-2026-52842/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 16:18:26 GMTCVEcriticalCVE-2026-52843: Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials modehttps://agentprime.io/advisories/CVE-2026-52843/https://agentprime.io/advisories/CVE-2026-52843/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 16:16:07 GMTCVEcritical