<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: opensift</title><description>Every new CVE for opensift.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28677: OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access</title><link>https://agentprime.io/advisories/CVE-2026-28677/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28677/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 04:23:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28676: OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operations</title><link>https://agentprime.io/advisories/CVE-2026-28676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28676/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 04:23:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28675: OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints</title><link>https://agentprime.io/advisories/CVE-2026-28675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28675/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 04:22:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27189: OpenSift: Race-prone local persistence could cause state corruption/loss</title><link>https://agentprime.io/advisories/CVE-2026-27189/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27189/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 21 Feb 2026 00:01:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27170: OpenSift: SSRF risk in URL ingestion endpoint</title><link>https://agentprime.io/advisories/CVE-2026-27170/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27170/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Feb 2026 23:58:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27169: OpenSift: Persistent XSS Chat Tool Rendering</title><link>https://agentprime.io/advisories/CVE-2026-27169/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27169/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Feb 2026 23:51:45 GMT</pubDate><category>CVE</category></item></channel></rss>