85 matches found
scopeblind-gateway
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...
cmcp
cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...
Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting
The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. id: CVE-2022-23397 info: name: Cedar Gate EZ-NET = 6.8.0 - Cross-Si...
RAISE: Reinforcing Access Control Policy Synthesis in LLMs Via Symbolic Evaluation
Translating natural-language access-control requirements into policies requires careful reasoning about permissions, constraints, and exceptions, and even frontier LLMs often produce policies that violate the intended authorization semantics. We construct CedarInstruct, to our knowledge the first...
CLEANSTART-2026-LE78036 Security fix for ghsa-r6v5-fh4h-64xc applied in: cedar 4.11.2-r1, shadowsocks-rust 1.24.0-r0, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r0, ztunnel-fips 1.27.8-r3, ztunnel-fips 1.28.4-r0, ztunnel-fips 1.29.0-r0
ghsa-r6v5-fh4h-64xc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FU11492 Security fix for CVE-2026-25727 applied in: cedar 4.11.2-r1, ztunnel-fips 1.27.8-r4
CVE-2026-25727 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WE84407 Security fix for ghsa-7gcf-g7xr-8hxj applied in: cedar 4.11.2-r1
Security vulnerability affects the cedar package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101990
Security vulnerability affects the cedar package. This issue is resolved in later releases. See references for vulnerability details...
scopeblind-gateway v0.13.1
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...
cmcp v0.4.0
cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...
CLEANSTART-2026-UL80677 Security fixes in cedar 4.11.2-r1
Package cedar version 4.11.2-r1 fixes 3 vulnerabilities: CVE-2026-25727, ghsa-r6v5-fh4h-64xc, ghsa-7gcf-g7xr-8hxj...
CVE-2026-49473
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
CVE-2026-49473: Interpretation Conflict
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
EUVD-2026-57699
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
CVE-2026-49473 @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
CVE-2026-49473
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
CVE-2026-49473 @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
CVE-2026-49473
The CVE concerns @cedar-policy/authorization-for-expressjs, an Express middleware that applies Cedar authorization by mapping HTTP requests to Cedar actions. A concrete flaw in versions up to 0.2.x is that the middleware uses req.originalUrl (which includes the query string) to identify Cedar act...
CVE-2026-49473 @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...
