<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: stoatchat</title><description>Every new CVE for stoatchat.</description><link>https://agentprime.io/</link><item><title>CVE-2026-100679: stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket</title><link>https://agentprime.io/advisories/CVE-2026-100679/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100679/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100678: stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting</title><link>https://agentprime.io/advisories/CVE-2026-100678/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100678/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100677: stoatchat before 0.15.5 Account Enumeration via Error Location</title><link>https://agentprime.io/advisories/CVE-2026-100677/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100677/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100676: stoatchat before 0.15.5 Local Filesystem Read via SVG</title><link>https://agentprime.io/advisories/CVE-2026-100676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100676/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100675: stoatchat before 0.15.5 Denial of Service via mass mentions</title><link>https://agentprime.io/advisories/CVE-2026-100675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100675/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100674: stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization</title><link>https://agentprime.io/advisories/CVE-2026-100674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100674/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74869: stoatchat before 0.15.0 Missing Authorization via Subscribe</title><link>https://agentprime.io/advisories/CVE-2026-74869/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74869/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 11:04:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73059: stoatchat before 0.15.0 Permission Bypass via message_fetch</title><link>https://agentprime.io/advisories/CVE-2026-73059/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73059/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 16 Aug 2026 13:14:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73058: stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass</title><link>https://agentprime.io/advisories/CVE-2026-73058/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73058/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 16 Aug 2026 13:14:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73057: stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service</title><link>https://agentprime.io/advisories/CVE-2026-73057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73057/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 16 Aug 2026 13:14:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63088: stoatchat &lt; 0.14.0 SSRF via DNS-based IP Blocklist Bypass</title><link>https://agentprime.io/advisories/CVE-2026-63088/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63088/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 16:40:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-58360: stoatchat before 0.7.8 Unrestricted Account Creation</title><link>https://agentprime.io/advisories/CVE-2024-58360/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-58360/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 12:23:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63306: stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints</title><link>https://agentprime.io/advisories/CVE-2026-63306/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63306/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 12:19:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-71388: stoatchat 20241213-1 Webhook Token Disclosure via Read Permissions</title><link>https://agentprime.io/advisories/CVE-2025-71388/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-71388/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 12:19:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-71377: stoatchat before 20250210-1 Unrestricted Message History Fetch</title><link>https://agentprime.io/advisories/CVE-2025-71377/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-71377/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 12:19:14 GMT</pubDate><category>CVE</category></item></channel></rss>