npm - @blamejs/exceptd-skills - Versions diffs - 0.12.24 → 0.12.25 - Mend

@blamejs/exceptd-skills 0.12.24 → 0.12.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (46) hide show

package/AGENTS.md +12 -4
package/CHANGELOG.md +83 -0
package/data/_indexes/_meta.json +31 -31
package/data/_indexes/activity-feed.json +45 -45
package/data/_indexes/catalog-summaries.json +19 -19
package/data/_indexes/chains.json +320 -0
package/data/_indexes/currency.json +9 -9
package/data/_indexes/frequency.json +39 -2
package/data/_indexes/jurisdiction-clocks.json +2 -2
package/data/_indexes/jurisdiction-map.json +3 -1
package/data/_indexes/section-offsets.json +396 -396
package/data/_indexes/summary-cards.json +3 -3
package/data/_indexes/token-budget.json +73 -73
package/data/atlas-ttps.json +491 -19
package/data/attack-techniques.json +198 -84
package/data/cve-catalog.json +1309 -9
package/data/exploit-availability.json +300 -10
package/data/framework-control-gaps.json +395 -1
package/data/global-frameworks.json +44 -19
package/data/rfc-references.json +93 -1
package/data/zeroday-lessons.json +475 -13
package/lib/schemas/cve-catalog.schema.json +24 -3
package/manifest-snapshot.json +1 -1
package/manifest-snapshot.sha256 +1 -1
package/manifest.json +59 -59
package/package.json +1 -1
package/sbom.cdx.json +6 -6
package/skills/ai-attack-surface/skill.md +11 -2
package/skills/ai-c2-detection/skill.md +3 -1
package/skills/ai-risk-management/skill.md +3 -1
package/skills/api-security/skill.md +4 -0
package/skills/attack-surface-pentest/skill.md +1 -0
package/skills/container-runtime-security/skill.md +3 -1
package/skills/dlp-gap-analysis/skill.md +1 -1
package/skills/exploit-scoring/skill.md +2 -2
package/skills/incident-response-playbook/skill.md +1 -1
package/skills/kernel-lpe-triage/skill.md +6 -1
package/skills/mcp-agent-trust/skill.md +7 -2
package/skills/mlops-security/skill.md +1 -1
package/skills/rag-pipeline-security/skill.md +4 -2
package/skills/sector-financial/skill.md +1 -1
package/skills/skill-update-loop/skill.md +1 -1
package/skills/supply-chain-integrity/skill.md +3 -1
package/skills/threat-model-currency/skill.md +1 -1
package/skills/webapp-security/skill.md +2 -0
package/skills/zeroday-gap-learn/skill.md +2 -2

package/data/_indexes/chains.json CHANGED Viewed

@@ -1834,6 +1834,326 @@
       "rfc_refs": []
     }
   },
+  "CVE-2024-21626": {
+    "name": "runc /proc/self/fd leak (Leaky Vessels)",
+    "rwep": 75,
+    "cvss": 8.6,
+    "cisa_kev": true,
+    "epss_score": 0.65,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2024-3094": {
+    "name": "xz-utils liblzma backdoor",
+    "rwep": 70,
+    "cvss": 10,
+    "cisa_kev": true,
+    "epss_score": 0.86,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2024-3154": {
+    "name": "CRI-O arbitrary kernel-module load",
+    "rwep": 30,
+    "cvss": 8.1,
+    "cisa_kev": false,
+    "epss_score": 0.012,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2023-43472": {
+    "name": "MLflow path-traversal arbitrary file read",
+    "rwep": 30,
+    "cvss": 7.5,
+    "cisa_kev": false,
+    "epss_score": 0.014,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2020-10148": {
+    "name": "SolarWinds Orion API authentication bypass (SUNBURST chain)",
+    "rwep": 75,
+    "cvss": 9.8,
+    "cisa_kev": true,
+    "epss_score": 0.945,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2023-3519": {
+    "name": "Citrix NetScaler ADC/Gateway unauth RCE (CitrixBleed precursor)",
+    "rwep": 75,
+    "cvss": 9.8,
+    "cisa_kev": true,
+    "epss_score": 0.967,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2024-1709": {
+    "name": "ConnectWise ScreenConnect auth-bypass",
+    "rwep": 75,
+    "cvss": 10,
+    "cisa_kev": true,
+    "epss_score": 0.973,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2026-20182": {
+    "name": "Cisco SD-WAN authentication bypass to admin",
+    "rwep": 65,
+    "cvss": 10,
+    "cisa_kev": true,
+    "epss_score": 0.5,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2024-40635": {
+    "name": "containerd integer overflow IP mask leak",
+    "rwep": 30,
+    "cvss": 5.9,
+    "cisa_kev": false,
+    "epss_score": 0.005,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "MAL-2026-TANSTACK-MINI": {
+    "name": "Mini Shai-Hulud (TanStack worm)",
+    "rwep": 55,
+    "cvss": 9.8,
+    "cisa_kev": false,
+    "epss_score": null,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "MAL-2026-ANTHROPIC-MCP-STDIO": {
+    "name": "Anthropic SDK MCP STDIO command-injection (embargoed)",
+    "rwep": 25,
+    "cvss": 9,
+    "cisa_kev": false,
+    "epss_score": null,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2026-GTIG-AI-2FA": {
+    "name": "GTIG-tracked AI-built 2FA-bypass zero-day (placeholder)",
+    "rwep": 55,
+    "cvss": 8.1,
+    "cisa_kev": false,
+    "epss_score": null,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2026-30623": {
+    "name": "Anthropic MCP SDK stdio command-injection",
+    "rwep": 30,
+    "cvss": 8.8,
+    "cisa_kev": false,
+    "epss_score": 0.02,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2025-12686": {
+    "name": "Synology BeeStation unauth RCE (Pwn2Own Ireland 2025)",
+    "rwep": 50,
+    "cvss": 9.8,
+    "cisa_kev": false,
+    "epss_score": 0.04,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2025-62847": {
+    "name": "QNAP QTS/QuTS hero RCE (Pwn2Own Ireland 2025, chain 1/3)",
+    "rwep": 45,
+    "cvss": 9.8,
+    "cisa_kev": false,
+    "epss_score": 0.03,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2025-62848": {
+    "name": "QNAP QTS/QuTS hero RCE (Pwn2Own Ireland 2025, chain 2/3)",
+    "rwep": 45,
+    "cvss": 9.8,
+    "cisa_kev": false,
+    "epss_score": 0.03,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2025-62849": {
+    "name": "QNAP QTS/QuTS hero RCE (Pwn2Own Ireland 2025, chain 3/3)",
+    "rwep": 40,
+    "cvss": 8.8,
+    "cisa_kev": false,
+    "epss_score": 0.02,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2025-59389": {
+    "name": "QNAP Hyper Data Protector critical RCE (Pwn2Own Ireland 2025)",
+    "rwep": 45,
+    "cvss": 9.8,
+    "cisa_kev": false,
+    "epss_score": 0.05,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2025-11837": {
+    "name": "QNAP Malware Remover code-injection",
+    "rwep": 40,
+    "cvss": 8,
+    "cisa_kev": false,
+    "epss_score": 0.025,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
+  "CVE-2026-42945": {
+    "name": "NGINX Rift",
+    "rwep": 40,
+    "cvss": 9.2,
+    "cisa_kev": false,
+    "epss_score": null,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
   "CWE-20": {
     "name": "Improper Input Validation",
     "category": "Validation",

package/data/_indexes/currency.json CHANGED Viewed

@@ -28,7 +28,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 8,
       "action_required": false
     },
     {
@@ -55,7 +55,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 3,
       "action_required": false
     },
     {
@@ -64,7 +64,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 4,
+      "forward_watch_count": 5,
       "action_required": false
     },
     {
@@ -91,7 +91,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 1,
       "action_required": false
     },
     {
@@ -190,7 +190,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 4,
       "action_required": false
     },
     {
@@ -199,7 +199,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 4,
       "action_required": false
     },
     {
@@ -244,7 +244,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 1,
       "action_required": false
     },
     {
@@ -316,7 +316,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 6,
+      "forward_watch_count": 8,
       "action_required": false
     },
     {
@@ -343,7 +343,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 1,
       "action_required": false
     },
     {

package/data/_indexes/frequency.json CHANGED Viewed

@@ -2063,12 +2063,26 @@
       "CWE-916"
     ],
     "atlas_refs": [
+      "AML.T0001",
+      "AML.T0011.002",
       "AML.T0024",
       "AML.T0044",
       "AML.T0048",
       "AML.T0053",
       "AML.T0055",
-      "AML.T0057"
+      "AML.T0057",
+      "AML.T0097",
+      "AML.T0098",
+      "AML.T0099",
+      "AML.T0100",
+      "AML.T0101",
+      "AML.T0102",
+      "AML.T0103",
+      "AML.T0104",
+      "AML.T0105",
+      "AML.T0106",
+      "AML.T0107",
+      "AML.T0108"
     ],
     "d3fend_refs": [
       "D3-ANCI",
@@ -2086,10 +2100,26 @@
       "AU-Essential-8-MFA",
       "AU-Essential-8-Patch",
       "DORA-Art28",
+      "DORA-IA-CTPP-Oversight",
+      "DORA-ITS-TLPT",
+      "DORA-RTS-Incident-Classification",
+      "DORA-RTS-Subcontracting",
+      "EU-AI-Act-Annex-IX-Conformity",
       "EU-AI-Act-Art-15",
+      "EU-AI-Act-Art-53-GPAI",
+      "EU-AI-Act-Art-55-Systemic",
+      "EU-AI-Act-GPAI-CoP",
       "EU-CRA-Art13",
+      "HIPAA-Security-Rule-2026-NPRM-164.308",
+      "HIPAA-Security-Rule-2026-NPRM-164.310",
+      "HIPAA-Security-Rule-2026-NPRM-164.312",
+      "HIPAA-Security-Rule-2026-NPRM-164.314",
       "NIS2-Art21-incident-handling",
       "NIST-800-53-SI-10",
+      "PCI-DSS-4.0.1-11.6.1",
+      "PCI-DSS-4.0.1-12.10.7",
+      "PCI-DSS-4.0.1-12.3.3",
+      "PCI-DSS-4.0.1-6.4.3",
       "UK-CAF-A1",
       "UK-CAF-B2",
       "UK-CAF-C1",
@@ -2104,10 +2134,17 @@
       "RFC-6546",
       "RFC-7208",
       "RFC-7489",
+      "RFC-7644",
       "RFC-7970",
+      "RFC-8460",
       "RFC-8461",
       "RFC-8616",
-      "RFC-9116"
+      "RFC-8617",
+      "RFC-8705",
+      "RFC-9112",
+      "RFC-9116",
+      "RFC-9449",
+      "RFC-9622"
     ],
     "dlp_refs": [
       "DLP-CHAN-CLIPBOARD-AI",

package/data/_indexes/jurisdiction-clocks.json CHANGED Viewed

@@ -38,9 +38,9 @@
             "trigger": "Major ICT-related incident (RTO/RPO breach, high financial impact, reputational damage)",
             "stages": null,
             "source": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554",
-            "authority": "ESAs (EBA, EIOPA, ESMA)"
+            "authority": "ESAs (EBA, EIOPA, ESMA) + Lead Overseers (CTPP regime from H2 2026)"
           },
-          "authority": "ESAs (EBA, EIOPA, ESMA)"
+          "authority": "ESAs (EBA, EIOPA, ESMA) + Lead Overseers (CTPP regime from H2 2026)"
         },
         "EU_CRA": {
           "breach_notification": {

package/data/_indexes/jurisdiction-map.json CHANGED Viewed

@@ -131,6 +131,7 @@
   "SG": {
     "skills": [
       "age-gates-child-safety",
+      "ai-attack-surface",
       "api-security",
       "cloud-security",
       "container-runtime-security",
@@ -140,6 +141,7 @@
       "global-grc",
       "identity-assurance",
       "incident-response-playbook",
+      "mcp-agent-trust",
       "mlops-security",
       "researcher",
       "sector-federal-government",
@@ -149,7 +151,7 @@
       "webapp-security"
     ],
     "example_excerpts": {},
-    "skill_count": 17
+    "skill_count": 19
   },
   "JP": {
     "skills": [