<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: pandora</title><description>Every new CVE for pandora.</description><link>https://agentprime.io/</link><item><title>CVE-2026-88069: Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis</title><link>https://agentprime.io/advisories/CVE-2026-88069/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88069/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 21:37:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-75531: Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora</title><link>https://agentprime.io/advisories/CVE-2026-75531/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75531/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 21:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75529: Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora</title><link>https://agentprime.io/advisories/CVE-2026-75529/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75529/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 20:52:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74767: Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb</title><link>https://agentprime.io/advisories/CVE-2026-74767/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74767/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 21:56:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74764: Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora</title><link>https://agentprime.io/advisories/CVE-2026-74764/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74764/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 21:39:09 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>