52 matches found
The Guard That Cried Wolf: How Scary Words Make Agent Guardrails Refuse Legitimate Actions
Agent guardrails are checks that approve or refuse each action before an LLM executes it. Sometimes they refuse requests that are genuinely safe. This over-safety blocks deployment when a guardrail refuses an authorized task. Evaluating over-safety is hard: at the boundary an authorized action...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : mailcap vulnerability (USN-8518-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8518-1 advisory. Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of...
USN-8518-1 mailcap vulnerability
Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of certain file types. An attacker could use this issue to escape a sandboxed application and execute arbitrary code on the host operating system...
USN-8518-1: mailcap vulnerability
Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of certain file types. An attacker could use this issue to escape a sandboxed application and execute arbitrary code on the host operating system...
PT-2026-56757
Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of certain file types. An attacker could use this issue to escape a sandboxed application and execute arbitrary code on the host operating system...
EUVD-2025-100785
Malicious code in cautioushalibutz3n npm...
EUVD-2025-106247
Malicious code in cautiousguanacoz3n npm...
MAL-2025-119056 Malicious code in cautious_fish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d959a771597c47073f47af4e49ec23197d7545f6313759b17262f75724be27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77373
Malicious code in cautiousjackal-notthedevs npm...
EUVD-2025-77372
Malicious code in cautiousmosquito-appteadev npm...
EUVD-2025-77371
Malicious code in cautiousnarwhal-appteadev npm...
EUVD-2025-79672
Malicious code in cautiousjaguarz3n npm...
EUVD-2025-82554
Malicious code in cautiousbasiliskreplicateautomation npm...
EUVD-2025-71166
Malicious code in cautiouscondorz3n npm...
Malicious code in cautious_anglerfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d63b6ecdd88b33a94d51e3c8bc333c0df903d43877c0e6c50110de32058991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-65069
Malicious code in cautiousanglerfishz3n npm...
Malicious code in cautious_rabbit_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc42342e3b0282c799ff76556277e14ff6d9221e2c74ed08c3cac4c10db3c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cautious_stingray_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834f79ee9d1641ab8ff364f61630f1bb8e0b77fc3dab80bd10de88701aa981a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...