<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: openolat</title><description>Every new CVE for openolat.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28228: OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2026-28228/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28228/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Mar 2026 20:31:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31946: OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow</title><link>https://agentprime.io/advisories/CVE-2026-31946/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31946/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Mar 2026 20:31:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-28198: XML external entity (XXE) injection in OpenOLAT</title><link>https://agentprime.io/advisories/CVE-2024-28198/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28198/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Mar 2024 19:38:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41242: Path Traversal in some REST methods leading to file upload to arbitrary places</title><link>https://agentprime.io/advisories/CVE-2021-41242/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41242/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Dec 2021 22:25:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41152: Path Traversal in Folder Component Leading to Local File Inclusion</title><link>https://agentprime.io/advisories/CVE-2021-41152/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41152/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Oct 2021 20:55:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-39181: Unsafe Deserialization of User Data Using XStream</title><link>https://agentprime.io/advisories/CVE-2021-39181/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-39181/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Sep 2021 19:45:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-39180: Path Traversal in Archive Handling Leading to Code Execution</title><link>https://agentprime.io/advisories/CVE-2021-39180/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-39180/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 17:55:14 GMT</pubDate><category>CVE</category></item></channel></rss>