Security Advisories
Security advisories published by Monachus Solutions to notify customers about vendor vulnerabilities and supply chain threats. Subscribe to the RSS feed to stay informed.
Filter:
| ID | Title | Severity | Date | Product |
|---|---|---|---|---|
| MNSA-2026-004 | Cursor Composer 2 Model Provenance Misrepresentation | High | 2026-03-20 | Cursor IDE — Composer 2 Model |
| MNSA-2026-003 | Trivy GitHub Actions Supply Chain Compromise | Critical | 2026-03-19 | Aqua Security Trivy GitHub Actions |
| MNSA-2026-002 | Agentic AI Production Incidents at Amazon Kiro | High | 2026-03-11 | Amazon Kiro / Agentic AI Coding Tools |
| MNSA-2026-001 | Zero-Click Remote Code Execution in Claude Desktop Extensions | Critical | 2026-02-09 | Claude Desktop with DXT Extensions |
| MNSA-2025-002 | Shai-Hulud npm Supply Chain Worm | Critical | 2025-11-24 | npm Ecosystem |
| MNSA-2025-001 | Cursor Workspace-Trust Autorun Remote Code Execution | Critical | 2025-09-17 | Cursor IDE |