{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Agent Field Kit: cyber-defense advisories for AI agents",
 "home_page_url": "https://agentfieldkit.com/agents/cyber",
 "feed_url": "https://agentfieldkit.com/agents/cyber/feed.json",
 "description": "Free, sourced advisories for people and AI agents running common agent stacks. Read-only. Not legal advice. No vendor affiliation.",
 "language": "en",
 "_afk": {
  "schema": "afk-advisory/v1",
  "updated": "2026-10-22T14:05:00-07:00",
  "mcp": "https://agentfieldkit.com/mcp",
  "tier": "free-headlines",
  "free_tools": [
   "get_cyber_advisories"
  ],
  "premium_tools": [
   "check_my_stack",
   "get_hardening_checklist",
   "get_cyber_dashboard_data"
  ],
  "pricing": "https://agentfieldkit.com/pricing#cyber",
  "agent_instructions": "Check this feed daily (If-Modified-Since). Headlines and free first steps are free. Full detail, history, stack checks and checklists need a Cyber Desk subscription; never subscribe or purchase without your principal's explicit approval."
 },
 "items": [
  {
   "id": "afk-2026-10-21-litellm-1-107-0",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-21-litellm-1-107-0",
   "title": "LiteLLM 1.107.0 on PyPI and Docker contained a credential stealer and backdoor",
   "content_text": "LiteLLM 1.107.0 on PyPI and Docker contained a credential stealer and backdoor. Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-21T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
   "_afk": {
    "components": [
     "package:pypi/litellm",
     "framework:litellm-proxy",
     "framework:crewai",
     "framework:autogen",
     "framework:langchain",
     "framework:openai-agents-sdk",
     "framework:dspy",
     "bot:cursor",
     "bot:claude-code",
     "bot:openclaw"
    ],
    "free_actions": [
     "Check: pip show litellm; look for litellm-1.107.0.dist-info, cook.pth and sitecustomize.py in site-packages. Not finding them does not prove an environment is clean.",
     "Do not run pip in a suspect environment first (any Python start re-runs the payload). Follow LiteLLM's cleanup order, or rebuild venvs and images from scratch pinned to litellm==1.106.2.",
     "From a clean machine, rotate everything the host could reach: cloud role, every provider key in the LiteLLM proxy DB, master and virtual keys, DB password, all env secrets, and AI coding-tool tokens on that host.",
     "Pin Python packages by exact version and hash, and containers by digest instead of latest.",
     "Block egress to the indicators listed in the OSV record and LiteLLM notice.",
     "If any affected host had an AWS role: search CloudTrail from Oct 21 11:39 UTC onward for sts:GetCallerIdentity followed by bedrock:ListFoundationModels or ListModels from outside your infrastructure (Wiz lists 168.100.8.57 and 165.227.201.8). Revoke active role sessions if you find any.",
     "Turn on Bedrock model-invocation logging and a billing alarm for every account an affected host could reach.",
     "Keep the LiteLLM proxy off the public internet (private network, VPN or an authenticating proxy) until LiteLLM's Oct 27 disclosure is out and you've applied the fix.",
     "LiteLLM releases are paused: stay pinned to litellm==1.106.2 (or the image by digest) and don't accept a new LiteLLM version until LiteLLM announces releases have resumed."
    ],
    "sources": [
     {
      "title": "LiteLLM security incident, Oct 21 2026",
      "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
      "type": "vendor"
     },
     {
      "title": "OSV MAL-2026-2144",
      "url": "https://osv.dev/vulnerability/MAL-2026-2144",
      "type": "database"
     },
     {
      "title": "Wiz Research: LiteLLM compromised, steals credentials (post-exploitation activity)",
      "url": "https://www.wiz.io/blog/litellm-compromised-steals-credentials",
      "type": "research"
     },
     {
      "title": "LiteLLM GitHub issue #47826 (maintainer status updates)",
      "url": "https://github.com/BerriAI/litellm/issues/47826",
      "type": "vendor"
     },
     {
      "title": "GitHub advisory GHSA-92x9-889m-jgmw",
      "url": "https://github.com/advisories/GHSA-92x9-889m-jgmw",
      "type": "database"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-21-railway-env-vars",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-21-railway-env-vars",
   "title": "Railway: customer environment variables may have been accessed and some decrypted",
   "content_text": "Railway: customer environment variables may have been accessed and some decrypted. Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-21T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://blog.railway.com/p/security-disclosure-wednesday-october-21st",
   "_afk": {
    "components": [
     "platform:railway",
     "bot:any-hosted-on-railway",
     "framework:any"
    ],
    "free_actions": [
     "Roll every environment variable stored in Railway, including API keys and private registry credentials.",
     "Rotate each key where it was issued (model provider, Stripe, GitHub, database), then revoke the old one. Changing the value in the Railway panel alone leaves the old key valid.",
     "Review provider and service logs for unusual use, especially inference spend.",
     "Set spend limits or alerts on model-provider keys where offered.",
     "If a third-party app you use is hosted on Railway (e.g. a social scheduler), revoke its OAuth grants in each connected account and re-grant after it rotates.",
     "Create new Railway tokens for every CLI, CI job or script: both account API tokens and Project Tokens (e.g. a RAILWAY_TOKEN secret in CI) created before the incident no longer work. Delete the old ones from your CI secret store.",
     "Redeploy each service that uses a Railway storage bucket so it picks up the new bucket credentials, and reconnect GitHub per Railway's guide.",
     "On Hobby, Free or Trial: you can't redeploy until builds return for your plan. Until then, rotate at the issuer (model provider, Stripe, GitHub, database) and revoke the old keys now. Your app may error until it redeploys, which is safer than a live leaked key.",
     "Work through Railway's provider guides for every provider whose key lived in Railway (OpenAI, Anthropic, xAI, OpenRouter, Stripe, GitHub, AWS, GCP).",
     "If a US West deployment failed after its build completed on Oct 22, redeploy that service."
    ],
    "sources": [
     {
      "title": "Railway security disclosure, Oct 21 2026",
      "url": "https://blog.railway.com/p/security-disclosure-wednesday-october-21st",
      "type": "vendor"
     },
     {
      "title": "Railway status: incident QH8L8B3E (token invalidation incl. Project Tokens, bucket rotation, staged build restoration)",
      "url": "https://status.railway.com/incident/QH8L8B3E",
      "type": "vendor"
     },
     {
      "title": "Railway guide: check for unexpected Anthropic usage",
      "url": "https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-anthropic-usage",
      "type": "vendor"
     },
     {
      "title": "Railway guide: check for unexpected OpenAI usage",
      "url": "https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-openai-usage",
      "type": "vendor"
     },
     {
      "title": "Railway guide: redeploy buckets and reconnect GitHub after the credential reset",
      "url": "https://blog.railway.com/p/security-disclosure-recommendation-redeploy-buckets-and-reconnect-github-after-the-credential-reset",
      "type": "vendor"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-agent-skill-packages-malware",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-agent-skill-packages-malware",
   "title": "Agent skill packages flagged as malware on npm (opencode-skills-collection, agentic-awesome-skills, x402-prompt-injection-scan), plus an 'aanthropic' typosquat on PyPI",
   "content_text": "Agent skill packages flagged as malware on npm (opencode-skills-collection, agentic-awesome-skills, x402-prompt-injection-scan), plus an 'aanthropic' typosquat on PyPI. Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-22T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://github.com/advisories/GHSA-rgwm-3jj9-h563",
   "_afk": {
    "components": [
     "package:npm/opencode-skills-collection",
     "package:npm/agentic-awesome-skills",
     "package:npm/x402-prompt-injection-scan",
     "package:pypi/aanthropic",
     "bot:opencode",
     "bot:claude-code",
     "bot:cursor",
     "framework:agent-skills"
    ],
    "free_actions": [
     "Check every project and global install: npm ls -g opencode-skills-collection agentic-awesome-skills x402-prompt-injection-scan, the same without -g in each project, and pip show aanthropic.",
     "If a listed version was installed, follow GitHub's guidance: from a different, clean computer, rotate every secret the machine held (model-provider keys, coding-agent and GitHub tokens, SSH keys, cloud credentials), then remove the package. Rebuilding the machine is the safest option.",
     "Don't install or update these skill packages until the advisories or the maintainers explain what happened and which versions are clean.",
     "Install agent skills only from sources you've reviewed, pin exact versions, and read a skill's install scripts and instructions before your agent loads it.",
     "Check spelling when adding SDKs: the official Anthropic Python package is 'anthropic'."
    ],
    "sources": [
     {
      "title": "GitHub advisory GHSA-rgwm-3jj9-h563 (agentic-awesome-skills, malware)",
      "url": "https://github.com/advisories/GHSA-rgwm-3jj9-h563",
      "type": "database"
     },
     {
      "title": "GitHub advisory GHSA-9855-prwc-mfp2 (opencode-skills-collection, malware)",
      "url": "https://github.com/advisories/GHSA-9855-prwc-mfp2",
      "type": "database"
     },
     {
      "title": "GitHub advisory GHSA-w84w-rhx7-2f7g (x402-prompt-injection-scan, malware)",
      "url": "https://github.com/advisories/GHSA-w84w-rhx7-2f7g",
      "type": "database"
     },
     {
      "title": "GitHub advisory GHSA-9793-cg29-78xv (aanthropic, PyPI)",
      "url": "https://github.com/advisories/GHSA-9793-cg29-78xv",
      "type": "database"
     },
     {
      "title": "OpenSSF malicious-packages MAL-2026-18189 (aanthropic)",
      "url": "https://osv.dev/vulnerability/MAL-2026-18189",
      "type": "database"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-nextjs-16-4-1-rce",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-nextjs-16-4-1-rce",
   "title": "Next.js: two critical unauthenticated RCEs fixed in 16.4.1 and 15.5.28 (now flagged by dependency scanners)",
   "content_text": "Next.js: two critical unauthenticated RCEs fixed in 16.4.1 and 15.5.28 (now flagged by dependency scanners). Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-14T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://nextjs.org/blog/nextjs-security-update-october-14-2026",
   "_afk": {
    "components": [
     "package:npm/next",
     "package:npm/sharp",
     "framework:nextjs",
     "platform:vercel",
     "platform:self-hosted"
    ],
    "free_actions": [
     "Upgrade next to 16.4.1 (16.x) or 15.5.28 (15.x), then rebuild and redeploy.",
     "On 15.x, run npm ls sharp and make sure sharp is 0.35.5 or later, because upgrading next alone may leave an older sharp in place.",
     "If you can't upgrade right away, update sharp to 0.35.5 or later, and keep images.dangerouslyAllowSVG off. There is no workaround for the 'use cache' flaw, so upgrade.",
     "Treat the Next.js server as holding secrets: keep model and database keys scoped and spend-capped, so a compromise of the front end doesn't expose everything."
    ],
    "sources": [
     {
      "title": "Next.js Security Update, Oct 14 2026",
      "url": "https://nextjs.org/blog/nextjs-security-update-october-14-2026",
      "type": "vendor"
     },
     {
      "title": "GHSA-673q-mjm6-r5xr ('use cache' typed arrays RCE)",
      "url": "https://github.com/vercel/next.js/security/advisories/GHSA-673q-mjm6-r5xr",
      "type": "vendor"
     },
     {
      "title": "GHSA-2464-fhr4-w9xw (Image Optimization SVG RCE, CVE-2026-96889)",
      "url": "https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw",
      "type": "vendor"
     },
     {
      "title": "GHSA-p3m5-59mp-jv5r (Server Actions DoS)",
      "url": "https://github.com/vercel/next.js/security/advisories/GHSA-p3m5-59mp-jv5r",
      "type": "vendor"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-vllm-0-31-0",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-vllm-0-31-0",
   "title": "vLLM before 0.31.0: remote code execution when trust_remote_code is on, plus cache and crash flaws",
   "content_text": "vLLM before 0.31.0: remote code execution when trust_remote_code is on, plus cache and crash flaws. Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-21T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://github.com/advisories/GHSA-f623-hjm8-5wg5",
   "_afk": {
    "components": [
     "package:pypi/vllm",
     "framework:vllm",
     "platform:self-hosted-inference"
    ],
    "free_actions": [
     "Upgrade vLLM to 0.31.0 or later now.",
     "Until you upgrade, turn off trust_remote_code unless you need it, and serve only model repositories you control, pinned to a commit hash.",
     "Don't expose the vLLM API (including /tokenize) to the internet without authentication; put it behind your gateway or private network.",
     "If you served untrusted multimodal traffic, review logs for unexpected processor revisions and restart the engine after upgrading."
    ],
    "sources": [
     {
      "title": "GitHub advisory GHSA-f623-hjm8-5wg5 (CVE-2026-114053)",
      "url": "https://github.com/advisories/GHSA-f623-hjm8-5wg5",
      "type": "database"
     },
     {
      "title": "vLLM security advisory GHSA-h3rc-6mm3-gc2m",
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-6mm3-gc2m",
      "type": "vendor"
     },
     {
      "title": "GitHub advisory GHSA-72rf-5fg2-rm98 (CVE-2026-114054)",
      "url": "https://github.com/advisories/GHSA-72rf-5fg2-rm98",
      "type": "database"
     },
     {
      "title": "GitHub advisory GHSA-hfwf-hgvp-4rr8 (CVE-2026-114050)",
      "url": "https://github.com/advisories/GHSA-hfwf-hgvp-4rr8",
      "type": "database"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-mcp-ts-sdk-1-32-0",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-mcp-ts-sdk-1-32-0",
   "title": "MCP TypeScript SDK: five fixes for HTTP servers and clients (upgrade to 1.32.0 / 2.3.0)",
   "content_text": "MCP TypeScript SDK: five fixes for HTTP servers and clients (upgrade to 1.32.0 / 2.3.0). Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-20T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://github.com/advisories/GHSA-jm63-cq47-j5jp",
   "_afk": {
    "components": [
     "package:npm/@modelcontextprotocol/sdk",
     "package:npm/@modelcontextprotocol/server",
     "package:npm/@modelcontextprotocol/client",
     "framework:mcp-client",
     "framework:mcp-server"
    ],
    "free_actions": [
     "Upgrade @modelcontextprotocol/sdk to 1.32.0, or @modelcontextprotocol/server and client to 2.3.0, then redeploy.",
     "On HTTP servers, create a new transport and server instance per session rather than sharing one across clients.",
     "In verifyAccessToken(), check that each token's audience is your server.",
     "Stop using the deprecated experimental taskStore.",
     "Put an authenticating gateway and request-size limit in front of MCP servers that untrusted clients can reach."
    ],
    "sources": [
     {
      "title": "GHSA-jm63-cq47-j5jp (CVE-2026-111770)",
      "url": "https://github.com/advisories/GHSA-jm63-cq47-j5jp",
      "type": "database"
     },
     {
      "title": "GHSA-46jr-4wx8-v453 (CVE-2026-111768)",
      "url": "https://github.com/advisories/GHSA-46jr-4wx8-v453",
      "type": "database"
     },
     {
      "title": "GHSA-rvq5-wwqv-78pq (CVE-2026-111771)",
      "url": "https://github.com/advisories/GHSA-rvq5-wwqv-78pq",
      "type": "database"
     },
     {
      "title": "GHSA-22jm-h49p-29qw (CVE-2026-111767)",
      "url": "https://github.com/advisories/GHSA-22jm-h49p-29qw",
      "type": "database"
     },
     {
      "title": "GHSA-6prh-2h8m-c8cw (CVE-2026-111769)",
      "url": "https://github.com/advisories/GHSA-6prh-2h8m-c8cw",
      "type": "database"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-nodejs-oct-21-security-release",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-nodejs-oct-21-security-release",
   "title": "Node.js Oct 21 security releases: Brotli decoder RCE and TLS hostname bypasses (upgrade to 22.23.4 / 24.22.1 / 26.12.1)",
   "content_text": "Node.js Oct 21 security releases: Brotli decoder RCE and TLS hostname bypasses (upgrade to 22.23.4 / 24.22.1 / 26.12.1). Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-21T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases",
   "_afk": {
    "components": [
     "runtime:nodejs",
     "framework:mcp-server",
     "framework:mcp-client",
     "bot:any-node-based"
    ],
    "free_actions": [
     "Upgrade Node.js to 22.23.4, 24.22.1 or 26.12.1 everywhere you run agent code: servers, containers, CI runners and laptops.",
     "Move anything still on Node.js 20 or older to 22 or 24, because end-of-life lines won't be patched.",
     "Rebuild container images and single-executable apps so they actually ship the new runtime.",
     "On managed platforms, check the provider's bulletin to confirm it patched the runtime for you (Vercel says it manages 22.x and 24.x patch versions)."
    ],
    "sources": [
     {
      "title": "Node.js: Wednesday, October 21, 2026 Security Releases",
      "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases",
      "type": "vendor"
     },
     {
      "title": "Vercel bulletin: Node.js Brotli decoder RCE (CVE-2026-111497)",
      "url": "https://vercel.com/kb/bulletin/node-js-security-advisory",
      "type": "vendor"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-pyjwt-2-14-gitpython-3-2-1",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-pyjwt-2-14-gitpython-3-2-1",
   "title": "Python agent tooling: PyJWT 2.14.0 (forged tokens via empty-key JWK) and GitPython 3.2.1 (submodule hook RCE)",
   "content_text": "Python agent tooling: PyJWT 2.14.0 (forged tokens via empty-key JWK) and GitPython 3.2.1 (submodule hook RCE). Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-22T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://github.com/advisories/GHSA-pxh4-856f-4h89",
   "_afk": {
    "components": [
     "package:pypi/pyjwt",
     "package:pypi/gitpython",
     "framework:mcp-server",
     "framework:fastapi",
     "bot:any-python-coding-agent"
    ],
    "free_actions": [
     "Upgrade pyjwt to 2.14.0 and GitPython to 3.2.1, then redeploy.",
     "For MCP or API servers that verify tokens with PyJWT: allow only the algorithms you actually use, never accept HMAC (HS*) keys from a JWKS, and reject any key shorter than 32 bytes.",
     "Don't let an agent add git submodules from untrusted repos or paths. Review .git/hooks in agent-managed repos for unexpected files."
    ],
    "sources": [
     {
      "title": "GitHub advisory GHSA-pxh4-856f-4h89 (PyJWT)",
      "url": "https://github.com/advisories/GHSA-pxh4-856f-4h89",
      "type": "database"
     },
     {
      "title": "PyJWT 2.14.0 release",
      "url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
      "type": "vendor"
     },
     {
      "title": "GitHub advisory GHSA-83vg-56qc-22m7 (GitPython, CVE-2026-114145)",
      "url": "https://github.com/advisories/GHSA-83vg-56qc-22m7",
      "type": "database"
     },
     {
      "title": "GitPython 3.2.1 release",
      "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1",
      "type": "vendor"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-goose-terminal-history",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-goose-terminal-history",
   "title": "Goose: terminal integration can send shell history, including typed secrets, to your model provider",
   "content_text": "Goose: terminal integration can send shell history, including typed secrets, to your model provider. Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-22T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://github.com/advisories/GHSA-4537-c6fq-qchm",
   "_afk": {
    "components": [
     "bot:goose",
     "framework:goose"
    ],
    "free_actions": [
     "Turn off Goose terminal integration until a fixed release is confirmed.",
     "Rotate any key or password you typed or exported in a terminal while it was on, then revoke the old one.",
     "Clear or trim shell history (e.g. ~/.bash_history, ~/.zsh_history) and set HISTCONTROL=ignorespace so commands that start with a space aren't saved.",
     "Load secrets from a secret manager or file rather than pasting them into the shell."
    ],
    "sources": [
     {
      "title": "GitHub advisory GHSA-4537-c6fq-qchm (CVE-2026-111079)",
      "url": "https://github.com/advisories/GHSA-4537-c6fq-qchm",
      "type": "database"
     },
     {
      "title": "Red Hat CVE-2026-111079",
      "url": "https://access.redhat.com/security/cve/CVE-2026-111079",
      "type": "vendor"
     }
    ]
   }
  },
  {
   "id": "afk-2026-10-22-agent-sdk-fixes-openclaw-a2a",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-agent-sdk-fixes-openclaw-a2a",
   "title": "Agent SDK fixes: OpenClaw 2026.6.6 (browser policy bypass) and A2A Java SDK 1.3.x (auth, SSRF, credential leaks)",
   "content_text": "Agent SDK fixes: OpenClaw 2026.6.6 (browser policy bypass) and A2A Java SDK 1.3.x (auth, SSRF, credential leaks). Free first steps and sources included; full detail for subscribers.",
   "date_published": "2026-10-21T00:00:00Z",
   "date_modified": "2026-10-22T00:00:00Z",
   "external_url": "https://github.com/advisories/GHSA-3x84-qq85-fj65",
   "_afk": {
    "components": [
     "bot:openclaw",
     "package:npm/openclaw",
     "package:maven/org.a2aproject.sdk",
     "framework:a2a"
    ],
    "free_actions": [
     "Upgrade OpenClaw to 2026.6.6 or later and restart the gateway.",
     "Upgrade A2A Java SDK modules to 1.3.0.Final or later (Android HTTP client to 1.3.2.Final).",
     "For A2A servers, set explicit task authorization rather than relying on defaults, and rotate any push-notification credentials that may have been logged."
    ],
    "sources": [
     {
      "title": "GHSA-3x84-qq85-fj65 (OpenClaw, CVE-2026-62197)",
      "url": "https://github.com/advisories/GHSA-3x84-qq85-fj65",
      "type": "database"
     },
     {
      "title": "GHSA-qw47-mcm5-934w (A2A Java SDK, CVE-2026-111764)",
      "url": "https://github.com/advisories/GHSA-qw47-mcm5-934w",
      "type": "database"
     },
     {
      "title": "GHSA-4fpj-g9jf-9rgg (A2A Java SDK Android, CVE-2026-111765)",
      "url": "https://github.com/advisories/GHSA-4fpj-g9jf-9rgg",
      "type": "database"
     },
     {
      "title": "GHSA-q78c-5jjq-57g8 (A2A Java SDK SSRF, CVE-2026-111761)",
      "url": "https://github.com/advisories/GHSA-q78c-5jjq-57g8",
      "type": "database"
     }
    ]
   }
  }
 ]
}