A one-character bearer token was enough to bypass authentication in LiteLLM's MCP Streamable HTTP endpoint, tracked as CVE-2026-59822, because the OAuth2 header path returned an empty authentication o…
A developer released v0.7.0 of PR Tour, an open-source skill for Codex and Claude Code that generates guided walkthroughs of pull requests, adding an optional "transition" field that lets readers insp…
CISA added seven CVEs to its Known Exploited Vulnerabilities catalog in September 2026, three of which affect infrastructure common in self-hosted AI stacks: the LiteLLM AI gateway proxy, the Kestra w…
A security checklist published in response to the September 2026 CISA Known Exploited Vulnerabilities wave warns that patching AI and workflow tooling such as BerriAI LiteLLM, the Kestra orchestrator,…
A critical authentication bypass in LiteLLM's MCP Streamable HTTP endpoint, tracked as CVE-2026-59822, allowed unauthenticated callers to list and invoke gateway-configured MCP tools by sending a forg…
Security researchers disclosed CVE-2026-48710, dubbed BadHost, an authentication bypass in the Starlette ASGI framework caused by inconsistent parsing of malformed Host headers. The flaw, affecting St…
A developer built PR Tour, a tool that generates a single HTML file for reading pull requests, using a coding agent to author reading order, explanations, and definition mappings into a manifest that …
A developer released Weftgate 0.2, an open-source local Python package that gives coding agents three capabilities: retrieving relevant source locations, storing repository-scoped memory notes in a lo…
Developer Avinash Amudala released Weftgate v0.1.1, a local static verification gate that checks environment variables, Python and Node imports, and FastAPI/Starlette route handlers in agent-written c…
CISA has added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting AI infrastructure and web frameworks including LiteLLM, Starlette, Kestra, JFrog Artifactory, Sangoma Swi…
On September 2, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, with three targeting AI infrastructure: CVE-2026-59822 in LiteLLM (CVSS 8.8, affects versions pri…
On May 8, 2026, BerriAI disclosed CVE-2026-42271, a command-injection flaw in LiteLLM, one of the most widely deployed open-source AI gateways. The vulnerability scored CVSS 8.8 and affects releases f…
A developer built an MCP server at mcp.decile.com using Ember.js for the embedded MCP Apps, alongside a backend stack including Kubernetes, Starlette, Django REST Framework, and nginx. The project hig…
Security researchers at Secwest and X41 D-Sec discovered CVE-2026-48710, a high-severity authentication bypass vulnerability in the Starlette Python web framework that allows attackers to use malforme…
An engineer built a documentation Q&A engine that returns `null` instead of hallucinating answers when a query has no match in the corpus. The Knowledge Base API uses BM25 retrieval with POS-aware lem…
A critical vulnerability tracked as CVE-2026-48710 and nicknamed "BadHost" was disclosed in the Starlette ASGI framework, affecting all versions prior to 1.0.1. The flaw allows attackers to manipulate…
A new open-source Python framework, mcp-authflow, provides an OAuth 2.0 authorization server for Model Context Protocol (MCP) servers, enabling token issuance and management to protect MCP tool access…
A single-character bug in the Starlette open-source framework, tracked as CVE-2026-48710 and nicknamed BadHost, allowed attackers to bypass authentication on millions of servers running AI agents and …
A single malformed character in a web request can let an unauthenticated attacker bypass access controls in applications built on the Starlette framework, which powers FastAPI, researchers at cybersec…
A critical vulnerability in the open source Starlette framework, tracked as CVE-2026-48710 and named BadHost, exposes millions of AI agents and tools to potential data theft and credential compromise.…