nah v1.4.0

expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it compares • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool call...

MAL-2026-13910 Malicious code in @years20/n8n-nodes-utils-helper-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f282ccd8bb4c80e0316cecf2a9294b7f183bb2339cca52ff72508f2978f2e60 On npm install postinstall and on require/import of the package's main entry, callback.js and index.js execute id, hostname, and WSL detection, read...

nah v1.2.0

expensive mistakes stop here microsecond verdicts. no LLM. extensible. nahguard.ai • what it blocks • how it decides • install • extend • threat model root@kitploit: curl -fsSL nahguard.ai/install | sh claude code · codex · cursor · pi · + 10 more nah is a guard that sits in your coding agent's...

nah v0.11.0

expensive mistakes stop here microsecond verdicts. no LLM. extensible. nahguard.ai • what it blocks • how it decides • install • extend • threat model root@kitploit: curl -fsSL nahguard.ai/install | sh claude code · codex · cursor · pi · + 10 more nah is a guard that sits in your coding agent's...

CVE-2026-0849

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution...

CVE-2026-30856 WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a vulnerability involving tool name collision and indirect prompt injection allows a malicious remote MCP server to hijack tool execution. By exploiting an ambiguous naming...

PT-2026-23799

Name of the Vulnerable Software and Affected Versions WeKnora versions prior to 0.3.0 Description WeKnora, an LLM-powered framework for deep document understanding and semantic retrieval, is susceptible to a vulnerability involving tool name collision and indirect prompt injection. A malicious...

EUVD-2022-40084

Malicious code in bioql PyPI...

EUVD-2022-28982

Malicious code in bioql PyPI...

EUVD-2021-27855

Malicious code in bioql PyPI...

CVE-2024-47540

A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash. Mitigation Do no...

CVE-2024-51736 Command execution hijack on Windows with Process class in symfony/process

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijackin...

Akamai Enterprise Application Access Client 代码问题漏洞

Akamai Enterprise Application Access Client Akamai Eaa Client is an enterprise application access program from Akamai, Inc. It is used to provide fast, secure access. A security vulnerability exists in Akamai EAA, which stems from an unquoted path that could allow an attacker to hijack the...

CVE-2021-40683: Unquoted Search Path or Element

In Akamai EAA Enterprise Application Access Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution...