agentprime: monkeytypeEvery new CVE for monkeytype.https://agentprime.io/CVE-2026-118762: Monkeytype: fork PR can execute code with elevated GITHUB_TOKENhttps://agentprime.io/advisories/CVE-2026-118762/https://agentprime.io/advisories/CVE-2026-118762/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 16:50:44 GMTCVEcriticalCVE-2026-69183: Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)https://agentprime.io/advisories/CVE-2026-69183/https://agentprime.io/advisories/CVE-2026-69183/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 16:16:43 GMTCVECVE-2025-66563: Monkeytype vulnerable to stored XSS in approve quotes pagehttps://agentprime.io/advisories/CVE-2025-66563/https://agentprime.io/advisories/CVE-2025-66563/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Dec 2025 22:34:10 GMTCVECVE-2025-59838: Monkeytype Vulnerable to Self-XSS on loading saved custom texthttps://agentprime.io/advisories/CVE-2025-59838/https://agentprime.io/advisories/CVE-2025-59838/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 14:52:16 GMTCVECVE-2024-41127: Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.https://agentprime.io/advisories/CVE-2024-41127/https://agentprime.io/advisories/CVE-2024-41127/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Aug 2024 14:46:21 GMTCVE