GitGot

説明 GitGot は、半自動化されたフィードバック駆動型のツールで、ユーザーが GitHub 上の大量の公開データを迅速に検索し、機密シークレットを見つけることを可能にします。 仕組み 検索セッション中、ユーザーは GitGot に検索結果に関するフィードバックを提供し、無視する結果を指定することで、GitGot は結果セットを刈り込みます。ユーザーは、ファイル名、リポジトリ名、ユーザー名、またはファイル内容のあいまい一致によってファイルをブラックリストに登録できます。 以前のセッションで生成されたブラックリストは保存でき、類似したクエリ（例：example.com と...

TamarinAgent

信頼度誘導型プロトコルIRレビューUI このリポジトリには、LLM支援によるセキュリティプロトコルモデリングのためのローカルなhuman-in-the-loop UIが含まれています。これは我々の研究で説明されているワークフローをサポートします： LLM支援セキュリティプロトコルモデリングのための信頼度誘導型プロトコルIR このシステムは、自然言語によるプロトコル記述とSapic+/Tamarin生成の間のセマンティックチェックポイントとしてプロトコル中間表現（IR）を導入し、レビュー担当者が形式的検証の前にLLM生成のプロトコルモデルのセマンティックな正確性を監査できるようにします。...

sdk

@cosignet/sdk 가볍고, 제로 의존성인 TypeScript 클라이언트 for Cosignet — 사람-인-더-루프 승인 방식으로 고위험 AI 에이전트 행동에 대해, 페이로드에 바인딩된 패스키 서명을 제공합니다. 위험한 작업이 실행되기 전에 사람을 루프에 넣으세요: 작업을 일시 중지하고, 특정 사람으로부터 명시적인 패스키 승인Face ID / Touch ID / Windows Hello / 보안 키을 받은 다음, 정확한 페이로드에 바인딩된 서명된 결정이 있을 때만 계속 진행합니다. — 이후에 작업을 변경하면 서명이 더 ...

PYSEC-2026-3707

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

EUVD-2026-57275

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-67260

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

SummaryThe gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no authtoken is configured the default. By adding dangerous tool names e.g., shellexec, filewrite to the allowlist, an attacker can cause the ExecApprovalManager to...

PT-2026-59538

Summary The gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no auth token is configured the default. By adding dangerous tool names e.g., shell exec, file write to the allowlist, an attacker can cause the ExecApprovalManager to...

CVE-2026-30911

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

GHSA-8X34-9Q3V-H7G8 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

PYSEC-2026-17

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

CVE-2026-30911

Apache Airflow versions 3.1.0 through 3.1.7 are vulnerable to a missing authorization flaw in the Execution API's Human-in-the-Loop (HITL) endpoints. This security bypass allows any authenticated task instance to perform unauthorized actions, such as reading, approving, or rejecting HITL workflow...

CVE-2026-30911

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

CVE-2026-30911 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

CVE-2026-30911: Missing Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

Decision-Aware Trust Signal Alignment for SOC Alert Triage

Detection systems that utilize machine learning are progressively implemented at Security Operations Centers SOCs to help an analyst to filter through high volumes of security alerts. Practically, such systems tend to reveal probabilistic results or confidence scores which are ill-calibrated and...

New Exam Security Questions in the AI Era: Comparing AI-Generated Item Similarity between Naive and Detail-Guided Prompting Approaches

Large language models LLMs have emerged as powerful tools for generating domain-specific multiple-choice questions MCQs, offering efficiency gains for certification boards but raising new concerns about examination security. This study investigated whether LLM-generated items created with...