<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nodebb</title><description>Every new CVE for nodebb.</description><link>https://agentprime.io/</link><item><title>CVE-2026-120007: NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid</title><link>https://agentprime.io/advisories/CVE-2026-120007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120007/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 18:52:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73038: NodeBB &lt; 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name</title><link>https://agentprime.io/advisories/CVE-2026-73038/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73038/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 18:41:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58593: NodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local User</title><link>https://agentprime.io/advisories/CVE-2026-58593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58593/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 19:27:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-30591: NodeBB Pre-Authentication Denial-of-Service</title><link>https://agentprime.io/advisories/CVE-2023-30591/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-30591/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.59 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Sep 2023 05:06:43 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2020-15149: Account takeover in NodeBB</title><link>https://agentprime.io/advisories/CVE-2020-15149/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-15149/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2020 17:50:12 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>