Skip to content

security-recipes.ai Quick Start

Overview
Threat Model
Emerging Patterns

Overview
Integrate an AI Agent
Visual Guide

Overview
GitHub Copilot
Devin
Cursor
Codex
Claude

Overview
Claude
GitHub Copilot
Cursor
Codex
Devin
General
Reputable Sources
CVE Recipes
Classic Vulnerable Defaults

Overview
Control Plane Blueprint
Agentic Threat Radar
Workflow Control Plane
MCP Gateway Policy
Connector Intake
MCP Connector Trust
Agentic Assurance Pack
Readiness Scorecard
Red-Team Drill Pack
Agent Identity Ledger
Context Poisoning Guard
Reviewer Playbook
Gatekeeping Patterns
Runtime Controls
Compliance & Audit

Automation Contribute

CTRL K

Quick Start
Fundamentals
Docs
Agents
Prompt Library
MCP Servers
Security Remediation
Automation
Contribute
More
Contribute

Command-Injection

CVE-2026-41497 - PraisonAI MCP command injection incomplete fix

May 2, 2026

GHSA-vr7g-88fq-vhq3 - Paperclip workspace cleanup command injection

May 2, 2026

CVE-2026-7039 - ssh-mcp description command injection

May 2, 2026

GHSA-v4p8-mg3p-g94g - LiteLLM MCP stdio command execution

May 2, 2026

GHSA-rpm5/GHSA-x2qx - GitPython command injection

May 2, 2026

© 2026 security-recipes.ai · An open, community-driven playbook for security engineering teams