Policy dependency / Stack layer
Codex makes Code Mode wrappers transparent to Guardian policy and adds read-only policy to MCP tool requests
GitHub
Stack layer / Threat pattern
Three new advisories land on the most-used community GitLab MCP server, including a five-way bypass of its read-only mode and project allow-list
GitHub Advisory Database
Stack layer / Contrast
Hierarchos-Native trains 143 Transformer architectures on Rust and Vulkan with no CUDA or PyTorch
GitHub / necat101 (via r/LocalLLaMA)
Stack layer / Threat pattern
llama.cpp patches an unauthenticated RPC use-after-free that yields remote code execution, five months after the private advisory
GitHub
Stack layer / Threat pattern
Pattern: the MCP security story has moved from individual servers to the SDKs everyone builds on
GitHub Security Advisories
Stack layer / Threat pattern
Claude Code v2.1.274 closes two Bash permission escapes and stops MCP errors printing resolved secrets
GitHub
Stack layer / Update thread
CrewAI 1.15.22 adds an llm_overlay context variable that routes individual agent roles to different models
GitHub Releases
Stack layer / Update thread
Ollama 0.34.1 graduates MLX safetensors creation and cuts /api/tags cold time from 3.1 s to 294 ms
GitHub