TamarinAgent

UI de Revisión de IR de Protocolo Guiada por Confianza Este repositorio contiene una UI local con intervención humana para el modelado de protocolos de seguridad asistido por LLM. Admite el flujo de trabajo descrito en nuestro trabajo: IR de Protocolo Guiada por Confianza para el Modelado de...

GitGot

描述 GitGot 是一款半自动化、反馈驱动的工具，旨在帮助用户快速搜索 GitHub 上的大量公开数据，寻找敏感密钥。 工作原理 在搜索会话期间，用户可以向 GitGot 提供关于忽略哪些搜索结果的反馈，GitGot 则会裁剪结果集。用户可以通过文件名、仓库名、用户名或文件内容的模糊匹配来屏蔽文件。 之前会话生成的屏蔽列表可以保存并用于类似查询（例如，example.com 对比 subdomain.example.com 对比 Example Org）。会话也可以随时暂停和恢复。...

sdk

@cosignet/sdk 轻量、零依赖的 TypeScript 客户端，用于 Cosignet — 人在回路中 批准高风险 AI 代理操作， 并附带绑定负载的通行密钥签名。 在危险操作执行前引入人工审批：暂停操作，获取一个人的明确通行密钥批准（Face ID / Touch ID / Windows Hello / 安全密钥），仅在签署的决策 绑定到确切负载 后才继续执行——事后修改操作则签名不再匹配。Cosignet 是一个审批和证据层，而非执行器或策略引擎。可在任何支持全局 fetch + Web Crypto 的环境中运行：Node 18+、Cloudflare...

PYSEC-2026-3707

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

EUVD-2026-57275

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-67260

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

SummaryThe gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no authtoken is configured the default. By adding dangerous tool names e.g., shellexec, filewrite to the allowlist, an attacker can cause the ExecApprovalManager to...

PT-2026-59538

Summary The gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no auth token is configured the default. By adding dangerous tool names e.g., shell exec, file write to the allowlist, an attacker can cause the ExecApprovalManager to...

CVE-2026-30911

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

GHSA-8X34-9Q3V-H7G8 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

PYSEC-2026-17

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

CVE-2026-30911

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

CVE-2026-30911

Apache Airflow versions 3.1.0 through 3.1.7 are vulnerable to a missing authorization flaw in the Execution API's Human-in-the-Loop (HITL) endpoints. This security bypass allows any authenticated task instance to perform unauthorized actions, such as reading, approving, or rejecting HITL workflow...

CVE-2026-30911 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

CVE-2026-30911: Missing Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

Decision-Aware Trust Signal Alignment for SOC Alert Triage

Detection systems that utilize machine learning are progressively implemented at Security Operations Centers SOCs to help an analyst to filter through high volumes of security alerts. Practically, such systems tend to reveal probabilistic results or confidence scores which are ill-calibrated and...

New Exam Security Questions in the AI Era: Comparing AI-Generated Item Similarity between Naive and Detail-Guided Prompting Approaches

Large language models LLMs have emerged as powerful tools for generating domain-specific multiple-choice questions MCQs, offering efficiency gains for certification boards but raising new concerns about examination security. This study investigated whether LLM-generated items created with...