Propio, a financial tracking platform for short-term rentals, has implemented an AI-powered OCR system called Smart Scan that extracts financial data from receipts and invoices. The system uses asynch…
A bug in Sentry's JavaScript SDK double-counts tool calls in streaming mode for Google's Gemini integration, recording each invocation twice with inconsistent parameter keys (`args` vs. `arguments`). …
GitHub shipped CodeQL 2.26.0 on July 10 with a new static analysis query, js/system-prompt-injection, that detects untrusted user input flowing into AI model system prompts in JavaScript and TypeScrip…
GitHub shipped CodeQL 2.26.0 on July 10 with a static analysis query that detects prompt injection in AI applications by tracking untrusted user data into system prompts for OpenAI, Anthropic, and Goo…
GitHub released CodeQL 2.26.0, adding support for Kotlin 2.4.0 and a new JavaScript/TypeScript query to detect AI system prompt injection vulnerabilities. The update also improves analysis accuracy ac…