docs: update CVE tracker — fix counts, add 50 new CVEs, archive resolved#148
Merged
docs: update CVE tracker — fix counts, add 50 new CVEs, archive resolved#148
Conversation
- Fix summary counts (were inflated since inception: 51 → 84 actual) - Partial defense count corrected from 2 → 1 (both were upgraded to full) - Add 50 newly discovered CVEs from NVD + GitHub Security Advisories - Assess defense coverage for all new entries - Archive 24 resolved CVEs (Full + Patched) to cve-tracker-archive.md - Add cve-reference.md as flat lookup table - Remove unrelated CVEs (LangChain, LibreChat) - Upgrade CVE-2026-33946 (None → Full: MCP gateway catches hijacked sessions) - Upgrade CVE-2026-33980 (None → Partial: Crust sees tool call args) - Consolidate triage entries into main product sections - Update README.md CVE count (51 → 84)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
cve-tracker-archive.mdcve-reference.mdas flat lookup table for all 84 CVEsUpdated Coverage
Test plan
doc-consistencypre-commit hook passes (README count matches tracker)gitleakspasses (no secrets in advisory URLs)cve-tracker-archive.md