<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wso2-carbon-api-gateway</title><description>Every new CVE for wso2-carbon-api-gateway.</description><link>https://agentprime.io/</link><item><title>CVE-2026-3415: XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service</title><link>https://agentprime.io/advisories/CVE-2026-3415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3415/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 17:32:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-8154: HTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header Manipulation</title><link>https://agentprime.io/advisories/CVE-2025-8154/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8154/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 09:30:36 GMT</pubDate><category>CVE</category></item></channel></rss>