Vulnerabilities
Update Agent Zero Web UI to 1.15 to block high-severity cross-site scripting flaw
Versions of Agent Zero before 1.15 fail to sanitize chat inputs, allowing attackers to execute scripts within authenticated user sessions.
Cross-site scripting
Everything Patch Review has reported about Cross-site scripting: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch Kiro IDE to 0.8.140 to Block Remote Code Execution via Malicious Color Themes
AWS patches a remote code execution vulnerability in Kiro IDE that requires users to trust workspaces before exploitation.