Vulnerabilities
Upgrade DynamoDB MCP Server to Stop Code Execution on Hosts
A flaw in the open-source AWS tool lets attackers run commands on servers via crafted database model names. Update to version 2.1.6 immediately.
Code Injection
Everything Shell Bulletin has reported about Code Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Block Remote Code Execution in openapi-typescript-codegen Before Version 0.31.0
A critical injection flaw in openapi-typescript-codegen allows attackers to run arbitrary JavaScript via malicious API definitions, risking full system compromise.