@blamejs/exceptd-skills 0.13.119 → 0.13.120

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.13.120 — 2026-05-26
+
+CVE catalog — LangChain JS serialization injection. Adds **CVE-2025-68665**, the JavaScript sibling of the already-catalogued Python-side CVE-2025-68664. LangChain JS's `toJSON()` (and `JSON.stringify` of LangChain objects) did not escape free-form data containing the internal `lc` marker key, so attacker-controlled data carrying that structure is rehydrated as a legitimate LangChain object on deserialization instead of staying plain data (CWE-502; GitHub CNA CVSS v3.1 8.6, scope-changed / NVD 9.1). Fixed in `@langchain/core` 0.3.80 / 1.1.8 and `langchain` 0.3.37 / 1.2.3. Reuses the LLM-output deserialization trust-zone control (NEW-CTRL-064) and AI-tool input-sanitization (NEW-CTRL-005). Scored conservatively below the Python sibling, which additionally carries suspected-exploitation and weaponization signals the JS variant lacks. CVE count 410 → 411.
+
 ## 0.13.119 — 2026-05-26
 
 CVE catalog — Chainlit LLM-app framework. Adds two flaws in the `/project/element` update flow of Chainlit, a widely used open-source framework for conversational-AI / LLM apps. **CVE-2026-22218** (VulnCheck CNA CVSS v4.0 7.1; NVD v3.1 6.5) — a custom element with a caller-supplied `path` is copied into the requesting user's session without validation, so an authenticated client reads arbitrary files on the server host (CWE-22 path traversal); fixed in 2.9.4. Reuses the AI-runtime-API path-traversal validation control (NEW-CTRL-094) shared with the AnythingLLM upload traversal. **CVE-2026-22219** (VulnCheck CNA CVSS v4.0 8.3; NVD v3.1 7.7, scope-changed) — with the SQLAlchemy data-layer backend, a custom element's `url` is fetched server-side and the response stored, so an authenticated client reaches internal services or cloud metadata (CWE-918 SSRF); fixed in 2.9.4. Reuses the AI-data-pipeline import SSRF control (NEW-CTRL-105) shared with the Dify, RAGFlow, and Label Studio data-pipeline SSRFs. CVE count 408 → 410.

package/data/_indexes/_meta.json

@@ -1,21 +1,21 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-27T00:42:03.182Z",
+  "generated_at": "2026-05-27T02:21:37.099Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "13013b5a2f97fdc2569c0baf3511f90606784e9b1e429d58831ad04aa904d1b1",
+    "manifest.json": "6ab635bfaef39a128a874fa2db7853e857c026112aaf030c997d4c1d7e3f3218",
     "data/atlas-ttps.json": "8dca8b3a370632548b3d7f465686ac6b47a26920bf6f618db401e349af2a33e2",
-    "data/attack-techniques.json": "415afac98c453bb92367686e5322cff85f112225587ec60d42e460ace7fba9fa",
-    "data/cve-catalog.json": "b380a2d6b7cd170d130e605bd17e3df605a55d0574008f83b9b5e3b786450f97",
-    "data/cwe-catalog.json": "6d6277629cf78f1380b676f868e26c0c5029401bd5c3cc4d3852f3f1f2c715da",
+    "data/attack-techniques.json": "4237fe46b0d8700a90c8a4dabd8753bf54b1752b744b368c4caf76cb960553c8",
+    "data/cve-catalog.json": "51ef99a37316f596fa2fcb950405cedd7bf0576302f8c0bcf41535a0e7541369",
+    "data/cwe-catalog.json": "686ba057cdca827a6fd4eb1b559cb82fc1c97310f5af63a6adf6f0ac6d87f738",
     "data/d3fend-catalog.json": "9a54bccb9f24f84b32024216cc3f53819a053721ac8ab43c326859e68fc0ffaf",
     "data/dlp-controls.json": "d2406c482dddd30e49203879999dc4b3a7fd4d0494d6a61d86b91ee76415df19",
     "data/exploit-availability.json": "ec2656f0d9a893610e27b43eb6035fe9b18e057c9f6dfaac7e7d4959bbcbb795",
-    "data/framework-control-gaps.json": "4e86d952ca9434af0023cd1f6e39572e754c0b2641da11a0b31696810533d304",
+    "data/framework-control-gaps.json": "79171be6be0bfcb1e2c7b62b4e142d290579ea593974d67a47796a92d7a2aebf",
     "data/global-frameworks.json": "9ba563a85f7f8d6c3c957de64945e20925a89d0ed6ea6fc561cf093811acf558",
     "data/rfc-references.json": "66ef2e1f444a2cf0c2700a754f0a66030bb8a91d9e68394b9537ea1fe8b904fe",
-    "data/zeroday-lessons.json": "8f5f5e28c18fac450f892ffc34bfec54d7d996ed57e5c3200ae3ffa9cdcb38b5",
+    "data/zeroday-lessons.json": "a270416f6c20f17cd1cdf556622828d8efaf5073c3661c1fae4366949ed7fe27",
     "skills/kernel-lpe-triage/skill.md": "08b3e9815ba481c57c80f5fc0ccbf5bb7cbb41f570c235ba6ff9596b8c07354d",
     "skills/ai-attack-surface/skill.md": "c4c1eb22a38ca7a959b5725222bab8fbd4f4044a548a93f3e288e6f698334b72",
     "skills/mcp-agent-trust/skill.md": "89ac89084391d2341b6513fefb1be2d36b93de1c130f057696219c1c59440f13",
@@ -72,7 +72,7 @@
       "dlp_refs": 0
     },
     "trigger_table_entries": 538,
-    "chains_cve_entries": 399,
+    "chains_cve_entries": 400,
     "chains_cwe_entries": 172,
     "jurisdictions_indexed": 29,
     "handoff_dag_nodes": 42,

package/data/_indexes/activity-feed.json

@@ -149,7 +149,7 @@
       "artifact": "data/cve-catalog.json",
       "path": "data/cve-catalog.json",
       "schema_version": "1.0.0",
-      "entry_count": 410
+      "entry_count": 411
     },
     {
       "date": "2026-05-18",
@@ -165,7 +165,7 @@
       "artifact": "data/zeroday-lessons.json",
       "path": "data/zeroday-lessons.json",
       "schema_version": "1.1.0",
-      "entry_count": 405
+      "entry_count": 406
     },
     {
       "date": "2026-05-17",

package/data/_indexes/catalog-summaries.json

@@ -62,7 +62,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 410,
+      "entry_count": 411,
       "sample_keys": [
         "CVE-2025-53773",
         "CVE-2026-30615",
@@ -238,7 +238,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 405,
+      "entry_count": 406,
       "sample_keys": [
         "CVE-2026-31431",
         "CVE-2025-53773",

package/data/_indexes/chains.json

@@ -74182,6 +74182,22 @@
       ]
     }
   },
+  "CVE-2025-68665": {
+    "name": "LangChain JS toJSON() 'lc'-Key Serialization Injection",
+    "rwep": 25,
+    "cvss": 8.6,
+    "cisa_kev": false,
+    "epss_score": 0.00066,
+    "referencing_skills": [],
+    "chain": {
+      "cwes": [],
+      "atlas": [],
+      "d3fend": [],
+      "framework_gaps": [],
+      "attack_refs": [],
+      "rfc_refs": []
+    }
+  },
   "CWE-20": {
     "name": "Improper Input Validation",
     "category": "Validation",

package/data/attack-techniques.json

@@ -341,7 +341,8 @@
       "CVE-2026-39987",
       "CVE-2026-40933",
       "CVE-2026-45829",
-      "CVE-2026-6973"
+      "CVE-2026-6973",
+      "CVE-2025-68665"
     ],
     "description_full": "Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of [Unix Shell](https://attack.mitre.org/techniques/T1059/004) while Windows installations include the [Windows Command Shell](https://attack.mitre.org/techniques/T1059/003) and [PowerShell](https://attack.mitre.org/techniques/T1059/001). There are also cross-platform interpreters such as [Python](https://attack.mitre.org/techniques/T1059/006), as well as those commonly associated with client applications such as [JavaScript](https://attack.mitre.org/techniques/T1059/007) and [Visual Basic](https://attack.mitre.org/techniques/T1059/005). Adversaries may abuse these technologies in various ways as a means of executing arbitrary commands. Commands and scripts can be embedded in [Initial Access](https://attack.mitre.org/tactics/TA0001) payloads delivered to victims as lure documents or as secondary payloads downloaded from an existing C2. Adversaries may also execute commands through interactive terminals/shells, as well as utilize various [Remote Services](https://attack.mitre.org/techniques/T1021) in order to achieve remote Execution.(Citation: Powershell Remote Commands)(Citation: Cisco IOS Software Integrity Assurance - Command History)(Citation: Remote Shell Execution in Python)",
     "platforms": [
@@ -1586,7 +1587,8 @@
       "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
       "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
       "CVE-2024-12450",
-      "CVE-2026-22219"
+      "CVE-2026-22219",
+      "CVE-2025-68665"
     ],
     "description_full": "Adversaries may search compromised systems to find and obtain insecurely stored credentials. These credentials can be stored and/or misplaced in many locations on a system, including plaintext files (e.g. [Shell History](https://attack.mitre.org/techniques/T1552/003)), operating system or application-specific repositories (e.g. [Credentials in Registry](https://attack.mitre.org/techniques/T1552/002)), or other specialized files/artifacts (e.g. [Private Keys](https://attack.mitre.org/techniques/T1552/004)).(Citation: Brining MimiKatz to Unix)",
     "platforms": [

package/data/cve-catalog.json

@@ -39541,5 +39541,108 @@
     "_auto_imported": false,
     "_intake_method": "manual-verified-curation",
     "_kev_short_description": "Chainlit /project/element (SQLAlchemy backend) fetches a caller-supplied url server-side and stores the response, letting an authenticated client reach internal services (CWE-918 SSRF); fixed in 2.9.4."
+  },
+  "CVE-2025-68665": {
+    "name": "LangChain JS toJSON() 'lc'-Key Serialization Injection",
+    "type": "deserialization-injection",
+    "cvss_score": 8.6,
+    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+    "cvss_note": "GitHub (CNA, security-advisories@github.com) CVSS v3.1 base 8.6 (scope-changed, S:C); NVD v3.1 base 9.1. LangChain JS's toJSON() (and JSON.stringify of LangChain objects) did not escape free-form kwargs data containing the internal 'lc' marker key, so attacker-controlled data carrying that key structure is treated as a legitimate serialized LangChain object on deserialization rather than plain user data (CWE-502). This is the LangChain-JS sibling of the Python-side CVE-2025-68664 dumps()/dumpd() injection.",
+    "cisa_kev": false,
+    "poc_available": true,
+    "poc_description": "Documented in the LangChain JS advisory: free-form data with an 'lc' key passed through toJSON()/JSON.stringify is rehydrated as a framework object on load.",
+    "ai_discovered": false,
+    "ai_discovery_source": "human_researcher",
+    "ai_discovery_notes": "Disclosed via the LangChain JS GitHub Security Advisory and enriched by NVD. The abused surface is LangChain JS, a widely used framework for building LLM-powered applications.",
+    "ai_assisted_weaponization": false,
+    "ai_assisted_notes": "No AI-assisted weaponization evidence for the JS variant specifically; the flaw is unescaped framework-marker serialization in an LLM framework. (The Python sibling CVE-2025-68664 carries suspected-exploitation + weaponization signals; this JS entry is scored conservatively per the available evidence.)",
+    "active_exploitation": "none",
+    "active_exploitation_notes": "GitHub advisory disclosure with a coordinated fix; no confirmed in-the-wild exploitation reported for the JS variant as of curation, and the CVE is not in CISA KEV (verified against the live catalog).",
+    "affected": "LangChain JS: @langchain/core before 0.3.80 and before 1.1.8; langchain before 0.3.37 and before 1.2.3.",
+    "affected_versions": [
+      "@langchain/core < 0.3.80",
+      "@langchain/core < 1.1.8",
+      "langchain < 0.3.37",
+      "langchain < 1.2.3"
+    ],
+    "vector": "LangChain JS's toJSON() method (and downstream JSON.stringify of LangChain objects) did not escape free-form kwargs data containing the 'lc' marker key that LangChain uses internally to mark serialized objects, so user-controlled data carrying that structure is rehydrated as a legitimate LangChain object during deserialization instead of being kept as plain data (CWE-502 deserialization of untrusted data).",
+    "complexity": "low",
+    "complexity_notes": "GitHub v3.1 AV:N / AC:L / PR:N / UI:N, scope-changed (S:C).",
+    "patch_available": true,
+    "patch_required_reboot": false,
+    "live_patch_available": false,
+    "live_patch_tools": [],
+    "live_patch_notes": "Remediation is upgrading @langchain/core to 0.3.80 or 1.1.8+ and langchain to 0.3.37 or 1.2.3+; redeploy.",
+    "vendor_update_paths": [
+      "Upgrade @langchain/core to 0.3.80 / 1.1.8 (or later) and langchain to 0.3.37 / 1.2.3 (or later). Never round-trip untrusted free-form data through framework serializers that interpret internal marker keys; escape or reject the 'lc' marker in user-derived fields."
+    ],
+    "framework_control_gaps": {
+      "NIST-AI-RMF-MEASURE-2.7": "Serialization round-trip of untrusted free-form data through a framework marker is not in the published AI-risk taxonomy.",
+      "EU-AI-Act-Art15": "Robustness control does not enumerate the serialization-deserialization chain in an LLM framework as an attack surface.",
+      "ISO-IEC-42001-AIMS-A.6.2.5": "Lifecycle controls do not include trust-zone separation on LLM-framework (de)serialization.",
+      "OWASP-LLM-Top-10-LLM01": "Prompt Injection class — untrusted content reaching the serializer is the upstream trigger.",
+      "OWASP-LLM-Top-10-LLM02": "Insecure output handling — applies directly to rehydrating attacker data as a framework object."
+    },
+    "atlas_refs": [
+      "AML.T0051",
+      "AML.T0040"
+    ],
+    "attack_refs": [
+      "T1059",
+      "T1552"
+    ],
+    "rwep_score": 25,
+    "rwep_factors": {
+      "cisa_kev": 0,
+      "poc_available": 20,
+      "ai_factor": 0,
+      "active_exploitation": 0,
+      "blast_radius": 20,
+      "patch_available": -15,
+      "live_patch_available": 0,
+      "reboot_required": 0
+    },
+    "rwep_notes": "Moderate-high (RWEP 25, \"patch within 30 days\" band per lib/scoring.js). Not KEV (verified), no confirmed in-the-wild exploitation for the JS variant, patched (Hard Rule #3): poc_available=20 + blast_radius=20 (unauthenticated scope-changed deserialization injection in a widely used LLM framework), minus patch_available 15. Scored below its Python sibling CVE-2025-68664 (RWEP 52), which additionally carries suspected-exploitation + weaponization signals.",
+    "epss_score": 0.00066,
+    "epss_date": "2026-05-26",
+    "epss_note": "FIRST EPSS 0.00066 (20th percentile) as of 2026-05-26.",
+    "epss_source": "https://api.first.org/data/v1/epss?cve=CVE-2025-68665",
+    "cwe_refs": [
+      "CWE-502"
+    ],
+    "iocs": {
+      "behavioral": [
+        "LangChain JS applications round-tripping user-controlled free-form data through toJSON() / JSON.stringify where the data contains an 'lc' key.",
+        "Deserialized LangChain objects instantiated from fields that should have been plain user data.",
+        "@langchain/core < 0.3.80 / < 1.1.8 or langchain < 0.3.37 / < 1.2.3 handling untrusted serialized input — the exposed precondition."
+      ],
+      "_ioc_source_note": "Behavioral signatures anchored to the LangChain JS GitHub Security Advisory and NVD CVE-2025-68665 (CWE-502)."
+    },
+    "source_verified": "2026-05-26",
+    "verification_sources": [
+      "https://nvd.nist.gov/vuln/detail/CVE-2025-68665",
+      "https://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcore%401.1.8"
+    ],
+    "vendor_advisories": [
+      {
+        "vendor": "GitHub Security Advisory",
+        "advisory_id": "CVE-2025-68665",
+        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68665",
+        "severity": "high",
+        "published_date": "2025-12-23"
+      },
+      {
+        "vendor": "NVD",
+        "advisory_id": "CVE-2025-68665",
+        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68665",
+        "severity": "critical",
+        "published_date": "2025-12-23"
+      }
+    ],
+    "last_updated": "2026-05-26",
+    "discovery_attribution_note": "Manually curated from NVD CVE-2025-68665 (CWE-502) + the LangChain JS GitHub Security Advisory (CNA, CVSS v3.1 8.6). LangChain-JS toJSON() serialization injection — the JavaScript sibling of the Python-side CVE-2025-68664; reuses the LLM-output deserialization trust-zone control NEW-CTRL-064 + AI-tool input-sanitization NEW-CTRL-005.",
+    "_auto_imported": false,
+    "_intake_method": "manual-verified-curation",
+    "_kev_short_description": "LangChain JS toJSON() did not escape the internal 'lc' marker in free-form data, so attacker data is rehydrated as a framework object on deserialization (CWE-502); fixed in @langchain/core 1.1.8 / langchain 1.2.3."
   }
 }

package/data/cwe-catalog.json

@@ -1373,7 +1373,8 @@
       "CVE-2025-8747",
       "CVE-2026-20131",
       "CVE-2026-20963",
-      "CVE-2026-31229"
+      "CVE-2026-31229",
+      "CVE-2025-68665"
     ],
     "framework_controls_partially_addressing": [
       "NIST-800-53-SI-10",

package/data/framework-control-gaps.json

@@ -6284,7 +6284,8 @@
       "CVE-2023-43472",
       "CVE-2025-55319",
       "CVE-2025-68664",
-      "CVE-2026-30623"
+      "CVE-2026-30623",
+      "CVE-2025-68665"
     ],
     "atlas_refs": [
       "AML.T0010",
@@ -6591,7 +6592,8 @@
       "CVE-2025-68664",
       "CVE-2025-6965",
       "CVE-2026-22778",
-      "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP"
+      "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
+      "CVE-2025-68665"
     ],
     "theater_test": {
       "claim": "We are compliant with Art-15 (Accuracy, robustness, and cybersecurity of high-risk AI systems) because we follow the documented requirement: Article 15 — high-risk AI systems must be designed and developed so as to achieve an appropriate level of accuracy, robustness, and cybersecurity throughout their lifecycle. Anchored on the assumption",
@@ -7082,7 +7084,8 @@
     "evidence_cves": [
       "CVE-2025-10725",
       "CVE-2025-55319",
-      "CVE-2025-68664"
+      "CVE-2025-68664",
+      "CVE-2025-68665"
     ],
     "theater_test": {
       "claim": "We are compliant with Annex A.6.2.5 (AI system lifecycle — verification and validation) because we follow the documented requirement: Annex A.6.2.5 — verification and validation across the AI system lifecycle, ensuring intended behaviour is preserved across design, training, deployment, and operations. Anchored on lifecycle-stage ga",
@@ -7111,7 +7114,8 @@
     "opened_at": "2026-05-18",
     "evidence_cves": [
       "CVE-2025-55319",
-      "CVE-2025-68664"
+      "CVE-2025-68664",
+      "CVE-2025-68665"
     ],
     "theater_test": {
       "claim": "We are compliant with LLM01 (Prompt Injection (2023 edition)) because we follow the documented requirement: LLM01:2023 — preventing prompt injection where user-controlled input or third-party content overrides the developer's instructions to the LLM. Anchored on input-sanitisation, prompt-template hardening",
@@ -7139,7 +7143,8 @@
     "status": "open",
     "opened_at": "2026-05-18",
     "evidence_cves": [
-      "CVE-2025-68664"
+      "CVE-2025-68664",
+      "CVE-2025-68665"
     ],
     "theater_test": {
       "claim": "We are compliant with LLM02 (Insecure Output Handling (2023 edition)) because we follow the documented requirement: LLM02:2023 — preventing downstream systems from blindly trusting LLM output where it can produce XSS, SSRF, privilege escalation, or remote code execution. Anchored on treating LLM output as untrusted",

package/data/zeroday-lessons.json

@@ -17236,5 +17236,65 @@
     ],
     "_auto_imported": false,
     "_intake_method": "manual-verified-curation"
+  },
+  "CVE-2025-68665": {
+    "name": "LangChain JS toJSON() 'lc'-Key Serialization Injection",
+    "lesson_date": "2026-05-26",
+    "attack_vector": {
+      "description": "LangChain JS's toJSON() did not escape free-form data carrying the internal 'lc' marker key, so attacker-controlled data is rehydrated as a legitimate framework object on deserialization.",
+      "privileges_required": "none (untrusted serialized input)",
+      "complexity": "low",
+      "ai_factor": "The abused surface is LangChain JS, an LLM-application framework. The lesson: LLM frameworks must treat (de)serialization of untrusted free-form data as a trust boundary and refuse to rehydrate framework-internal object markers from user-derived fields."
+    },
+    "framework_coverage": {
+      "NIST-AI-RMF-MEASURE-2.7": {
+        "covered": true,
+        "adequate": false,
+        "gap": "Serialization round-trip of untrusted data through a framework marker is not in the AI-risk taxonomy."
+      },
+      "OWASP-LLM-Top-10-LLM02": {
+        "covered": true,
+        "adequate": false,
+        "gap": "Insecure output handling — rehydrating attacker data as a framework object."
+      },
+      "ALL-AI-PIPELINE-INTEGRITY": {
+        "covered": false,
+        "adequate": false,
+        "gap": "No framework treats an LLM framework's (de)serialization of untrusted data as an integrity trust zone."
+      }
+    },
+    "compliance_exposure_score": {
+      "percent_audit_passing_orgs_still_exposed": 81,
+      "basis": "LLM frameworks serialize free-form data through internal markers; trust-zone separation on (de)serialization is rarely audited.",
+      "theater_pattern": "ai_supply_chain_trust"
+    },
+    "ai_discovered_zeroday": false,
+    "ai_discovery_source": "human_researcher",
+    "ai_assist_factor": "none",
+    "new_control_requirements": [
+      {
+        "id": "NEW-CTRL-064",
+        "name": "LLM-OUTPUT-DESERIALIZATION-TRUST-ZONE",
+        "description": "LLM responses and untrusted free-form data must cross a serialisation trust boundary; frameworks must refuse to rehydrate framework-internal object markers (e.g. LangChain's 'lc' key) from user-derived fields.",
+        "evidence": "CVE-2025-68665 — LangChain JS toJSON()/JSON.stringify did not escape the 'lc' marker in attacker-controlled free-form data.",
+        "gap_closes": [
+          "NIST-AI-RMF-MEASURE-2.7",
+          "EU-AI-Act-Art15",
+          "ISO-IEC-42001-AIMS-A.6.2.5",
+          "OWASP-LLM-Top-10-LLM02"
+        ]
+      },
+      {
+        "id": "NEW-CTRL-005",
+        "name": "AI-TOOL-INPUT-SANITIZATION",
+        "description": "External-source content reaching the LLM / framework serializer must be treated as adversarial; pairs with NEW-CTRL-064 on the output side.",
+        "evidence": "CVE-2025-68665 — untrusted free-form data is the trigger; the (de)serialization trust zone is the closure.",
+        "gap_closes": [
+          "OWASP-LLM-Top-10-LLM01"
+        ]
+      }
+    ],
+    "_auto_imported": false,
+    "_intake_method": "manual-verified-curation"
   }
 }

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.13.119",
+  "version": "0.13.120",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-27T00:39:09.207Z",
+      "signed_at": "2026-05-27T02:18:52.702Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -123,7 +123,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "ztSKk/zFMFbT12qRcEeBKpydBn7fTT86KxMmor0DTCoKQWk5fJ0fSInfP1XMSB6rFk4/SuSjKVxQRMKVJ5a+Cg==",
-      "signed_at": "2026-05-27T00:39:09.209Z",
+      "signed_at": "2026-05-27T02:18:52.704Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -196,7 +196,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "K6QdPHNK5c4K5QFjrW0QsUhjp71D7SOisSoulwPNSvKRdi2rY+yg0kdckijBMkLMsVPyUvcC9giu93mKJ1OZDg==",
-      "signed_at": "2026-05-27T00:39:09.209Z",
+      "signed_at": "2026-05-27T02:18:52.705Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -248,7 +248,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "Qd3SBWmUAaaT++e1Ry2wBIz/dCBmNBMl0+4Rb0etvJLES0fIBEAkU1mTbgNZnT5XOg9J5twdUpymWtmKnDDQCQ==",
-      "signed_at": "2026-05-27T00:39:09.210Z"
+      "signed_at": "2026-05-27T02:18:52.705Z"
     },
     {
       "name": "compliance-theater",
@@ -279,7 +279,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "F2Shxae0ua0gPtvwzTRVzzHaIgJcFDRT3/akLUAZ4aaMQhkleKkcTaTpkjp+pTVEdPfLeLGNCeAOMs+whVYOBg==",
-      "signed_at": "2026-05-27T00:39:09.210Z"
+      "signed_at": "2026-05-27T02:18:52.705Z"
     },
     {
       "name": "exploit-scoring",
@@ -308,7 +308,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-27T00:39:09.211Z"
+      "signed_at": "2026-05-27T02:18:52.706Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -345,7 +345,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "W3pS8lnaCP96TQzsJpG5d5yv5IwgaQyS4Z2Ctcz5BOJf6LbajSIgeDgTZ4f4Bhr5m4E7KsgWGjZS4x7Fwd33BQ==",
-      "signed_at": "2026-05-27T00:39:09.211Z",
+      "signed_at": "2026-05-27T02:18:52.707Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -405,7 +405,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "/WDGygh1Ck4yWlBWDGtEUVCqKB8d+UaJXoAoBXujtt+GAl8JbMNpaN1TvI0WkEltQ9dTxaAzSn20/eVDqv8iDQ==",
-      "signed_at": "2026-05-27T00:39:09.211Z",
+      "signed_at": "2026-05-27T02:18:52.707Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -440,7 +440,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "za1NKBpy9LC91F/ESO/qhUfmvVr8GNItQOjR5OJLeHm+2dQ9HHiFWQK2eo53V/n/0uhubuggURA3yS6kJuWwBg==",
-      "signed_at": "2026-05-27T00:39:09.212Z",
+      "signed_at": "2026-05-27T02:18:52.707Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -474,7 +474,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "xiHAhhdufm9hCKU8PLiPE0MX65ej2F4OZwtlWLGLCiie9/km+Kiqbt192LcMvr94v83C98pb9wIaqFsFWft6AQ==",
-      "signed_at": "2026-05-27T00:39:09.212Z",
+      "signed_at": "2026-05-27T02:18:52.708Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -513,7 +513,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-27T00:39:09.213Z"
+      "signed_at": "2026-05-27T02:18:52.708Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -540,7 +540,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-27T00:39:09.213Z",
+      "signed_at": "2026-05-27T02:18:52.708Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -604,7 +604,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "i/17u4kJiSpcZAz7LnTyRePFugQOstQ1P4kVoe0oGf4E2/j8oIN9U9DccjUn/YHZhKWIJ2AILG/DMhvMrr3bBg==",
-      "signed_at": "2026-05-27T00:39:09.213Z",
+      "signed_at": "2026-05-27T02:18:52.709Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "QuOVaQ4E2Sl39TClbhZ7HA9XrYAyRrDL44HY3RTE7aWLue0hV2cxaBt40ALGmHS++631QGFDlZTLZI77Tr6nAA==",
-      "signed_at": "2026-05-27T00:39:09.214Z"
+      "signed_at": "2026-05-27T02:18:52.709Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -689,7 +689,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-27T00:39:09.214Z",
+      "signed_at": "2026-05-27T02:18:52.709Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -724,7 +724,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "urRcataVWg6/utyEkSiOWoNxTL8sABRjPR7ShyDfZGnAozFph/yDktSoaPVxQDXwu9EfJE+qhUW5OYR/yJECBQ==",
-      "signed_at": "2026-05-27T00:39:09.214Z"
+      "signed_at": "2026-05-27T02:18:52.710Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -796,7 +796,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "C7lv65/Ecm8JJgSKxrX5lxx0YFzKWtrIQSKp+vy50I5e8945s1JmifGUUrnQwRQhq/Pkv7EmfiH5XSO8h75bDg==",
-      "signed_at": "2026-05-27T00:39:09.215Z"
+      "signed_at": "2026-05-27T02:18:52.710Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -856,7 +856,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-27T00:39:09.215Z"
+      "signed_at": "2026-05-27T02:18:52.710Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -931,7 +931,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "IgEnpHOhCftAyfUNdKsjbrd169T9pJkk/rRM2ZEna+H18y7p5x48+1kME2sJMZjJuyAdQFBJi8PJXZFwLGI+DQ==",
-      "signed_at": "2026-05-27T00:39:09.215Z"
+      "signed_at": "2026-05-27T02:18:52.711Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1010,7 +1010,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-27T00:39:09.216Z"
+      "signed_at": "2026-05-27T02:18:52.711Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1067,7 +1067,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "G5q5elh7Q7eu2xcwTVQJGDTGfvZR0OGQaLSLJPb2wjzCHFF8PWuZfCHZdjjqisiRzRWPyLlzgfHeMJqOdy7cBw==",
-      "signed_at": "2026-05-27T00:39:09.216Z"
+      "signed_at": "2026-05-27T02:18:52.711Z"
     },
     {
       "name": "identity-assurance",
@@ -1134,7 +1134,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-27T00:39:09.216Z"
+      "signed_at": "2026-05-27T02:18:52.712Z"
     },
     {
       "name": "ot-ics-security",
@@ -1190,7 +1190,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-27T00:39:09.217Z"
+      "signed_at": "2026-05-27T02:18:52.712Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1242,7 +1242,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-27T00:39:09.217Z"
+      "signed_at": "2026-05-27T02:18:52.713Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1292,7 +1292,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "rFBpOQEJUPpl+v88Lw/WqVJRhTl80vy0VbPAbzQj3Q0suJRRrJg368I9uKu5LXIBKFDvKxnGIcIzbGg9NUtaCA==",
-      "signed_at": "2026-05-27T00:39:09.217Z"
+      "signed_at": "2026-05-27T02:18:52.713Z"
     },
     {
       "name": "webapp-security",
@@ -1366,7 +1366,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-27T00:39:09.218Z",
+      "signed_at": "2026-05-27T02:18:52.713Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1419,7 +1419,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-27T00:39:09.218Z"
+      "signed_at": "2026-05-27T02:18:52.714Z"
     },
     {
       "name": "sector-healthcare",
@@ -1479,7 +1479,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-27T00:39:09.219Z"
+      "signed_at": "2026-05-27T02:18:52.714Z"
     },
     {
       "name": "sector-financial",
@@ -1560,7 +1560,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-27T00:39:09.219Z"
+      "signed_at": "2026-05-27T02:18:52.715Z"
     },
     {
       "name": "sector-federal-government",
@@ -1629,7 +1629,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-27T00:39:09.219Z"
+      "signed_at": "2026-05-27T02:18:52.715Z"
     },
     {
       "name": "sector-energy",
@@ -1694,7 +1694,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-27T00:39:09.220Z"
+      "signed_at": "2026-05-27T02:18:52.716Z"
     },
     {
       "name": "sector-telecom",
@@ -1780,7 +1780,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-27T00:39:09.220Z"
+      "signed_at": "2026-05-27T02:18:52.716Z"
     },
     {
       "name": "api-security",
@@ -1849,7 +1849,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-27T00:39:09.220Z",
+      "signed_at": "2026-05-27T02:18:52.716Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -1935,7 +1935,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-27T00:39:09.221Z"
+      "signed_at": "2026-05-27T02:18:52.717Z"
     },
     {
       "name": "container-runtime-security",
@@ -1997,7 +1997,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-27T00:39:09.221Z",
+      "signed_at": "2026-05-27T02:18:52.717Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2071,7 +2071,7 @@
         "MITRE ATLAS v5.6.0 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IL+DlRCDJN/p08iiJCFkasKcoyjcB0uWrJ6ORLjQcS1HrUa5Xt62QxVjYPHzaevlm5y36ZdmfESqsZJmzK3lCg==",
-      "signed_at": "2026-05-27T00:39:09.222Z"
+      "signed_at": "2026-05-27T02:18:52.717Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2133,7 +2133,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "MmjLjlmOMLjhJJ4ZfR8MYlHam+ZB+eSqfh6Nv+DecaG4O5zeo9DBP/iL3cbyDVZxmhnhivgJild2ccYeWTeZAg==",
-      "signed_at": "2026-05-27T00:39:09.222Z"
+      "signed_at": "2026-05-27T02:18:52.718Z"
     },
     {
       "name": "ransomware-response",
@@ -2213,7 +2213,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "ssueL03g9fWlhXpTe+IiY5l7RqQkunN4DTN5QETKE+VOX+qggdjAR8PONxk77ol4xWYmHrM/VcH8CNtXUEvgBA==",
-      "signed_at": "2026-05-27T00:39:09.222Z"
+      "signed_at": "2026-05-27T02:18:52.718Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2266,7 +2266,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-27T00:39:09.223Z"
+      "signed_at": "2026-05-27T02:18:52.719Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2334,7 +2334,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "Rgho5TOFUL1txOzcVR0kASCNdovSU4yt99JlGilJlJRyg0A+BdeeQYrZrhPF6Vx2reUAVG0BeHfcZtSbi+cwCg==",
-      "signed_at": "2026-05-27T00:39:09.223Z"
+      "signed_at": "2026-05-27T02:18:52.719Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2414,7 +2414,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-27T00:39:09.223Z",
+      "signed_at": "2026-05-27T02:18:52.719Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2508,7 +2508,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-27T00:39:09.224Z",
+      "signed_at": "2026-05-27T02:18:52.720Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2526,6 +2526,6 @@
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "BvRZtzugPOarqp9NDYvoqmNg3x2LKli7H6/8ZA6AnFltpo+0P6OT7ZRbL59KV1qQa3VRMVoou20TrxlX/o+4Dg=="
+    "signature_base64": "8xQVpedWmMARNEegrwnz2W4OPK3DNwx8NVLOsszgTX6a98TPjomeeqSjvgwZMTwp8ww9lGo9OeOBKDHEh6PRAQ=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.13.119",
+  "version": "0.13.120",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:2b436c3d-e17c-4ea1-af65-34c58ac936ac",
+  "serialNumber": "urn:uuid:29df9bcc-77fa-4968-985c-b275cc54bde1",
   "version": 1,
   "metadata": {
-    "timestamp": "2048-12-31T21:55:09.000Z",
+    "timestamp": "2048-04-06T00:31:08.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.13.119"
+        "version": "0.13.120"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.119",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.120",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.13.119",
+      "version": "0.13.120",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.119",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.120",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1c2157333c7246bf3f70c29376772170b5af978f80f5f7316368f96fcfe399be"
+          "content": "85474d881c21336691974c55eb33a109fd65d71d7d087a32a9651e3ebcf54d43"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.119"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.120"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "eb54dd92e8611fcab399970bc1ed795d3c062d7941f9aa3aace47640c799cf14"
+          "content": "f5eed28e6e30d0b24ddc1adc311d81fccc9dd2192dfe3cf5de8dbfb86211f32d"
         },
         {
           "alg": "SHA3-512",
-          "content": "f2c0d592832cadb85840aae0b563e982108e233ed1f4a30ce16119d7dfd81d0a71209d8ea007d6eba733bf48eb02be5fcab059758e24a616e5541d3be8371cfa"
+          "content": "122532f516cc275e6a3fa0a820e6050f7abe873aebec74cfc9970af403e7bd981c3764b11fe3cb39684f4518067514aa5f9dc9efb1daf10ecb7c83285757b6cf"
         }
       ]
     },
@@ -311,11 +311,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "415afac98c453bb92367686e5322cff85f112225587ec60d42e460ace7fba9fa"
+          "content": "4237fe46b0d8700a90c8a4dabd8753bf54b1752b744b368c4caf76cb960553c8"
         },
         {
           "alg": "SHA3-512",
-          "content": "7afb5acd5b24b3d0ec39c63101d40aee085275317b75107b9b10df6ea5e8b1f54666c9f8e1556b4affb426a7d7d3827d7dd4c05b6cdb91aeea7a2135892bcb09"
+          "content": "d451f534fe061ab9ddb3233a11bdaf78bcc5356828fa7b8599d68bf88bcc266855cb6c326c0d56b280c08cef307c4e3b3a9e7dedd7987c3ab88c1ee5d2d5cc98"
         }
       ]
     },
@@ -326,11 +326,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b380a2d6b7cd170d130e605bd17e3df605a55d0574008f83b9b5e3b786450f97"
+          "content": "51ef99a37316f596fa2fcb950405cedd7bf0576302f8c0bcf41535a0e7541369"
         },
         {
           "alg": "SHA3-512",
-          "content": "29b4aff21f8da12100840b1f1d2668d459de9ede743581e809330be1b4ef2b7b999aadbfcaab7312f9a3896f2ba644e862d8ab72f6809f96f40dff8cac0f7ef8"
+          "content": "8bfd1ce80d40102b7bbaf5fae5696b48a739335d5ae29496edae00352a0799a625aa757e51e3853335886866a3975c06cf59bd670eccdc713e43c6e99f7731e2"
         }
       ]
     },
@@ -341,11 +341,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6d6277629cf78f1380b676f868e26c0c5029401bd5c3cc4d3852f3f1f2c715da"
+          "content": "686ba057cdca827a6fd4eb1b559cb82fc1c97310f5af63a6adf6f0ac6d87f738"
         },
         {
           "alg": "SHA3-512",
-          "content": "edae0b499dd663fcae900f83f35a60b9e025437bbd3ba4208e6697e37444f6608d0328d3be46320a0009d5e3d222ebc085b6905bf556a833dc5cdfa6edf409b0"
+          "content": "61863f79b3c5ce2be595a3ab469c8dfc8624b81aec6327e673a2197c784662b3cbd67826913875dcd4fdd226a9daf6ac09270ee903d4407e423f1b6a83c0f153"
         }
       ]
     },
@@ -401,11 +401,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4e86d952ca9434af0023cd1f6e39572e754c0b2641da11a0b31696810533d304"
+          "content": "79171be6be0bfcb1e2c7b62b4e142d290579ea593974d67a47796a92d7a2aebf"
         },
         {
           "alg": "SHA3-512",
-          "content": "0dd57c97d9cd9ac3b57a1dade0a53cd78d6134b3522f51a9ff0a7cecea6b85985370da32b0efb7624bd34dd98f44faaeb82994d439a09cd6c26fa693eec929e0"
+          "content": "2b806bf4f33ab7880c478ad8eeff3235ba5eb8a35abca789ffed19e78affe63d546e410ed807026af5a2d8bb58d8fab0d41fe11152683703eaddb833850cc71f"
         }
       ]
     },
@@ -791,11 +791,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8f5f5e28c18fac450f892ffc34bfec54d7d996ed57e5c3200ae3ffa9cdcb38b5"
+          "content": "a270416f6c20f17cd1cdf556622828d8efaf5073c3661c1fae4366949ed7fe27"
         },
         {
           "alg": "SHA3-512",
-          "content": "32e41126657084e4c3b69bb666c64272a412ca38b6ee9976731dac85ca16f23ad5a7f1b34932a37900140cc1f5ba0152c6ddeec8321f67f86433be5e156aa1be"
+          "content": "9813e70a63aaa6d2bdbe661a31afb9b12204e456285c233ae0a53e91f3076a71216075d01d0856df314c9a859943f741b8855a6fc32ff2c7efb310887565a1bc"
         }
       ]
     },
@@ -1661,11 +1661,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13013b5a2f97fdc2569c0baf3511f90606784e9b1e429d58831ad04aa904d1b1"
+          "content": "6ab635bfaef39a128a874fa2db7853e857c026112aaf030c997d4c1d7e3f3218"
         },
         {
           "alg": "SHA3-512",
-          "content": "d3bb7a560eabd23ac9bfc149fe0f421ca0cf5dfb0fb6496097f0bd804667cecab0e6b1faee2cb82c2fa2cbdec85e32947fbca19a618edaeaee31103bb3b532b8"
+          "content": "11ece73568c79b50fd45f88b79fe5b7b71e111ac356b39becebc1eb1a3a7b9e10a14de0664b145c6c4a7c5d9c71acf22d6d263cd28a9ea4d8c3d1f5b73d83df4"
         }
       ]
     },