kontext-cli

Website | Documentation | Dashboard | Discord Stop risky AI-agent actions before they run AI agents do more than suggest code. They run shell commands, read files, call services, change infrastructure, and interact with production systems. Kontext puts local policy between AI agents and the tools...

socbench

socbench Benchmark frontier reasoning LLMs as SOC agents on raw NetFlow data. socbench benchmarks frontier reasoning models as SOC agents: each model runs a bounded multi-turn agent loop against a deterministic, pre-indexed NetFlow corpus, with persona-scoped read-only tools, fixed dollar caps pe...

SUSE CVE-2026-118681

go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...

CVE-2026-120492

Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowedurls entries because validatemcpurl does not reject the semicolon character. Attackers can submit MCP URLs with '..;' segments to the /mcp endpoint, causing...

CVE-2026-116681

The row-scoped endpoints of a public shared view verified the target record with a primary-key read that ignored the view's row filter, while the view's own list and count endpoints enforced it. The mere existence of a primary key was enough to pass that check...

CVE-2026-120492: Chainlit: Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass…

Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowedurls entries because validatemcpurl does not reject the semicolon character. Attackers can submit MCP URLs with '..;' segments to the /mcp endpoint, causing...

PT-2026-135482

Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowed urls entries because validate mcp url does not reject the semicolon character. Attackers can submit MCP URLs with '..;' segments to the /mcp endpoint, causi...

CVE-2026-117681

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

EUVD-2026-114682

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

CVE-2026-117681 Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

DutchOven

DutchOven Application-scoped Windows network brownouts for deterministic red-team validation. Native C • Windows Filtering Platform • IPv4 + IPv6 • Dynamic cleanup Read the accompanying blog post → Quick start • Profiles • CLI • How it works • Build • BOF • Validation !CAUTION Controlled...

CVE-2026-117681: A flaw was found in konflux-ci

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

PT-2026-134488

Name of the Vulnerable Software and Affected Versions konflux-ci affected versions not specified Description A flaw in the user interface proxy allows privilege escalation when Transport Layer Security TLS certificate verification is automatically disabled for connections to internal backend...

CVE-2026-77771

CVE-2026-77771 — miniOrange 2FA Free & Pro: 2FA Bypass via Session-Scoped OTP Lockout An authentication bypass in the miniOrange Two-Factor Authentication plugin for WordPress allows an attacker who already holds a victim's valid password to brute-force the second factor without limit, defeating...

CVE-2026-61850

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the project-scoped RBAC API let an authenticated user with delegated permission to manage a Project's Roles or ServiceAccounts confer permissions exceeding the...

CVE-2026-61850 Kargo: Privilege escalation via Project RBAC management in the Kargo API

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the project-scoped RBAC API let an authenticated user with delegated permission to manage a Project's Roles or ServiceAccounts confer permissions exceeding the...

CVE-2026-61850

The Kargo software (versions 0.6.0 until 1.8.14, 1.9.9, and 1.10.8) is vulnerable to privilege escalation due to authorization flaws in the project-scoped RBAC API. The root cause is that the API performs only a coarse resource-kind edit check rather than verifying each individual permission bein...

CVE-2026-61850

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the "project-scoped RBAC API" let an authenticated user with delegated permission to manage a Project's "Roles" or "ServiceAccounts" confer permissions exceeding...

EUVD-2026-114371

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the project-scoped RBAC API let an authenticated user with delegated permission to manage a Project's Roles or ServiceAccounts confer permissions exceeding the...

CVE-2026-61850 Kargo: Privilege escalation via Project RBAC management in the Kargo API

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the project-scoped RBAC API let an authenticated user with delegated permission to manage a Project's Roles or ServiceAccounts confer permissions exceeding the...