agentprime: midnightbsd-mportEvery new CVE for midnightbsd-mport.https://agentprime.io/CVE-2026-54584: mport trusts environment-controlled temporary directories in privileged metadata extractionhttps://agentprime.io/advisories/CVE-2026-54584/https://agentprime.io/advisories/CVE-2026-54584/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:05:48 GMTCVECVE-2026-54579: mport mirror-selection ping accepts insufficiently validated ICMP replieshttps://agentprime.io/advisories/CVE-2026-54579/https://agentprime.io/advisories/CVE-2026-54579/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:59:52 GMTCVECVE-2026-54576: mport package installation has symlink TOCTOU in chown and chmod handlinghttps://agentprime.io/advisories/CVE-2026-54576/https://agentprime.io/advisories/CVE-2026-54576/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:58:25 GMTCVECVE-2026-54587: mport directory asset installation is vulnerable to symlink and path traversal raceshttps://agentprime.io/advisories/CVE-2026-54587/https://agentprime.io/advisories/CVE-2026-54587/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:56:33 GMTCVECVE-2026-54575: mport package fetch and clean paths are vulnerable to TOCTOU filesystem raceshttps://agentprime.io/advisories/CVE-2026-54575/https://agentprime.io/advisories/CVE-2026-54575/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:55:19 GMTCVECVE-2026-54578: mport verify can compare stale checksum data after hashing failureshttps://agentprime.io/advisories/CVE-2026-54578/https://agentprime.io/advisories/CVE-2026-54578/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:54:20 GMTCVECVE-2026-54586: mport permits repository and package mirror fetches over insecure transporthttps://agentprime.io/advisories/CVE-2026-54586/https://agentprime.io/advisories/CVE-2026-54586/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:53:24 GMTCVECVE-2026-54585: mport sample file handling can write outside the configured roothttps://agentprime.io/advisories/CVE-2026-54585/https://agentprime.io/advisories/CVE-2026-54585/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:52:33 GMTCVECVE-2026-54580: mport index decompression can leave partial or corrupt index data after zstd failureshttps://agentprime.io/advisories/CVE-2026-54580/https://agentprime.io/advisories/CVE-2026-54580/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:51:29 GMTCVECVE-2026-54582: mport package installation can overwrite existing unmanaged or differently owned fileshttps://agentprime.io/advisories/CVE-2026-54582/https://agentprime.io/advisories/CVE-2026-54582/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:50:40 GMTCVECVE-2026-54577: mport audit can inspect the wrong package when options are presenthttps://agentprime.io/advisories/CVE-2026-54577/https://agentprime.io/advisories/CVE-2026-54577/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:49:48 GMTCVECVE-2026-54583: mport package bundle downloads allow unsafe destination filenameshttps://agentprime.io/advisories/CVE-2026-54583/https://agentprime.io/advisories/CVE-2026-54583/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:46:28 GMTCVECVE-2026-54581: mport bootstrap index fetch can continue after hash verification failurehttps://agentprime.io/advisories/CVE-2026-54581/https://agentprime.io/advisories/CVE-2026-54581/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:45:37 GMTCVE