agentprime: onyxEvery new CVE for onyx.https://agentprime.io/CVE-2026-116004: onyx-dot-app Onyx PreviewTab.tsx cross site scriptinghttps://agentprime.io/advisories/CVE-2026-116004/https://agentprime.io/advisories/CVE-2026-116004/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 02:30:20 GMTCVECVE-2026-85700: Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpointshttps://agentprime.io/advisories/CVE-2026-85700/https://agentprime.io/advisories/CVE-2026-85700/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 14:32:42 GMTCVECVE-2026-63178: Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosurehttps://agentprime.io/advisories/CVE-2026-63178/https://agentprime.io/advisories/CVE-2026-63178/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:30:40 GMTCVECVE-2026-71424: Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servershttps://agentprime.io/advisories/CVE-2026-71424/https://agentprime.io/advisories/CVE-2026-71424/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:28:32 GMTCVEcriticalCVE-2026-42277: Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users fileshttps://agentprime.io/advisories/CVE-2026-42277/https://agentprime.io/advisories/CVE-2026-42277/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 03:51:11 GMTCVECVE-2026-42276: Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessionshttps://agentprime.io/advisories/CVE-2026-42276/https://agentprime.io/advisories/CVE-2026-42276/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 03:49:56 GMTCVECVE-2025-7894: Onyx Chat Interface a3_generate_simple_sql.py generate_simple_sql sql injectionhttps://agentprime.io/advisories/CVE-2025-7894/https://agentprime.io/advisories/CVE-2025-7894/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Jul 2025 14:02:07 GMTCVE