<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: microsoft-simplechat</title><description>Every new CVE for microsoft-simplechat.</description><link>https://agentprime.io/</link><item><title>CVE-2026-105798: SimpleChat: Stored XSS via group document filename in inline onclick handler</title><link>https://agentprime.io/advisories/CVE-2026-105798/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105798/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 14:25:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105797: SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)</title><link>https://agentprime.io/advisories/CVE-2026-105797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105797/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 14:23:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57206: SimpleChat plugin validation endpoints missing authentication and authorization</title><link>https://agentprime.io/advisories/CVE-2026-57206/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57206/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 15:17:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57205: SimpleChat: Authenticated users can access other users&apos; profile metadata through user IDOR endpoints</title><link>https://agentprime.io/advisories/CVE-2026-57205/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57205/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 15:12:46 GMT</pubDate><category>CVE</category></item></channel></rss>