OSV.dev
PulseAugur coverage of OSV.dev — every cluster mentioning OSV.dev across labs, papers, and developer communities, ranked by signal.
5 day(s) with sentiment data
-
AI coding repos show security risks and token bloat
A security audit of 10 popular GitHub repositories utilizing the Model Context Protocol (MCP) revealed significant vulnerabilities and inefficiencies. The audit found that 70% of these repositories contained dependencie…
-
RepoXray tool audits code repos for AI slopsquatting and secret exposure
RepoXray is a new tool designed to audit code repositories before installation or use with AI coding agents. It addresses concerns such as AI slopsquatting, where attackers register packages that LLMs hallucinate, by ch…
-
DBHub versions 0.22.5 and 0.22.6 share identical tool lists but differ in security status
Two versions of the DBHub tool, 0.22.5 and 0.22.6, were found to have identical tool lists and descriptions, making them indistinguishable to automated scanners that rely on this information. However, a security advisor…
-
Critical MCP Inspector vulnerabilities missed by npm audit
Critical security vulnerabilities have been identified in the MCP Inspector tool, specifically affecting versions up to 1.0.2 on the 1.x line and up to 2.12.0 on the 2.x line. These vulnerabilities, with CVSS scores of …
-
Security scan finds PraisonAI vulnerable among top MCP servers
A security scan of the top 500 MCP servers revealed that while most are secure, one server, PraisonAI, has a significant number of outstanding vulnerabilities. The scan, which analyzed servers from the official MCP Regi…
-
MCP dependency scans miss critical vulnerabilities in deeper packages
A security analysis revealed that standard dependency scanning tools can miss critical vulnerabilities in Model Context Protocol (MCP) servers. These tools often only check the top-level package manifest, failing to det…
-
MCP packages harbor hidden vulnerabilities and typosquatting risks
A security audit of 31 MCP server packages on npm and PyPI revealed significant vulnerabilities, with 11 packages containing a total of 54 unique vulnerabilities across their installed dependency trees. This highlights …