Security
GitLab, Node.js, Java and HTTP/3 alerts: what to update
GitLab, Node.js, Java and several HTTP/3 implementations received important alerts. Review the affected areas, fixed versions and priority actions.
Ainoa Blog
Security
GitHub Copilot CLI: how a file could hide commands
CVE-2026-29783 could hide dangerous commands inside apparently safe operations involving repositories, MCP and prompt injection.
Security
Prompt injection in Langroid: from message to server
CVE-2026-54769 scored 10.0: a manipulated instruction could escape Langroid's sandbox and execute commands on the server.
Security
An AI breached Hugging Face: lessons for companies
The Hugging Face incident shows why autonomous agents need strict boundaries, oversight and controls outside the model.