@blamejs/exceptd-skills 0.18.19 → 0.18.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/AGENTS.md +3 -3
  2. package/ARCHITECTURE.md +4 -4
  3. package/CHANGELOG.md +12 -0
  4. package/CONTEXT.md +2 -2
  5. package/README.md +5 -5
  6. package/agents/threat-researcher.md +2 -2
  7. package/data/_indexes/_meta.json +43 -43
  8. package/data/_indexes/activity-feed.json +26 -26
  9. package/data/_indexes/catalog-summaries.json +12 -12
  10. package/data/_indexes/chains.json +49360 -27428
  11. package/data/_indexes/frequency.json +9 -0
  12. package/data/_indexes/recipes.json +1 -1
  13. package/data/_indexes/section-offsets.json +82 -82
  14. package/data/_indexes/summary-cards.json +1 -1
  15. package/data/_indexes/token-budget.json +19 -19
  16. package/data/atlas-ttps.json +7 -7
  17. package/data/attack-techniques.json +110 -7
  18. package/data/cve-catalog.json +27635 -23365
  19. package/data/cwe-catalog.json +249 -5
  20. package/data/framework-control-gaps.json +209 -3
  21. package/data/zeroday-lessons.json +2202 -2
  22. package/lib/schemas/skill-frontmatter.schema.json +1 -1
  23. package/lib/version-pins.js +1 -1
  24. package/manifest-snapshot.json +2 -2
  25. package/manifest-snapshot.sha256 +1 -1
  26. package/manifest.json +88 -88
  27. package/package.json +2 -2
  28. package/sbom.cdx.json +109 -109
  29. package/scripts/builders/catalog-summaries.js +1 -1
  30. package/scripts/builders/recipes.js +1 -1
  31. package/skills/age-gates-child-safety/skill.md +2 -2
  32. package/skills/ai-attack-surface/skill.md +3 -3
  33. package/skills/ai-c2-detection/skill.md +4 -4
  34. package/skills/api-security/skill.md +1 -1
  35. package/skills/attack-surface-pentest/skill.md +3 -3
  36. package/skills/cloud-security/skill.md +2 -2
  37. package/skills/compliance-theater/skill.md +2 -2
  38. package/skills/container-runtime-security/skill.md +2 -2
  39. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  40. package/skills/dlp-gap-analysis/skill.md +4 -4
  41. package/skills/exploit-scoring/skill.md +1 -1
  42. package/skills/framework-gap-analysis/skill.md +3 -3
  43. package/skills/fuzz-testing-strategy/skill.md +1 -1
  44. package/skills/incident-response-playbook/skill.md +1 -1
  45. package/skills/mcp-agent-trust/skill.md +1 -1
  46. package/skills/mlops-security/skill.md +2 -2
  47. package/skills/ot-ics-security/skill.md +2 -2
  48. package/skills/policy-exception-gen/skill.md +2 -2
  49. package/skills/rag-pipeline-security/skill.md +3 -3
  50. package/skills/ransomware-response/skill.md +1 -1
  51. package/skills/sector-energy/skill.md +1 -1
  52. package/skills/sector-federal-government/skill.md +1 -1
  53. package/skills/sector-financial/skill.md +3 -3
  54. package/skills/sector-healthcare/skill.md +2 -2
  55. package/skills/security-maturity-tiers/skill.md +1 -1
  56. package/skills/skill-update-loop/skill.md +4 -4
  57. package/skills/supply-chain-integrity/skill.md +1 -1
  58. package/skills/threat-model-currency/skill.md +7 -7
  59. package/skills/threat-modeling-methodology/skill.md +1 -1
  60. package/skills/webapp-security/skill.md +1 -1
  61. package/skills/zeroday-gap-learn/skill.md +2 -2
package/data/framework-control-gaps.json CHANGED
@@ -341,11 +341,49 @@
341
341
  "status": "open",
342
342
  "opened_date": "2026-05-13",
343
343
  "evidence_cves": [
344
+ "CVE-2017-12637",
345
+ "CVE-2017-3066",
346
+ "CVE-2018-8639",
347
+ "CVE-2019-9874",
348
+ "CVE-2019-9875",
349
+ "CVE-2021-20035",
350
+ "CVE-2022-43769",
351
+ "CVE-2022-43939",
352
+ "CVE-2023-20118",
353
+ "CVE-2023-34192",
344
354
  "CVE-2023-44221",
355
+ "CVE-2024-13159",
356
+ "CVE-2024-13160",
357
+ "CVE-2024-13161",
358
+ "CVE-2024-20439",
359
+ "CVE-2024-20953",
345
360
  "CVE-2024-38475",
361
+ "CVE-2024-48248",
362
+ "CVE-2024-4885",
363
+ "CVE-2024-49035",
364
+ "CVE-2024-50302",
365
+ "CVE-2024-53150",
366
+ "CVE-2024-53197",
367
+ "CVE-2024-57968",
346
368
  "CVE-2024-58136",
369
+ "CVE-2025-0111",
370
+ "CVE-2025-1316",
347
371
  "CVE-2025-1976",
372
+ "CVE-2025-21590",
348
373
  "CVE-2025-24054",
374
+ "CVE-2025-24472",
375
+ "CVE-2025-24813",
376
+ "CVE-2025-24983",
377
+ "CVE-2025-24984",
378
+ "CVE-2025-24985",
379
+ "CVE-2025-24989",
380
+ "CVE-2025-24991",
381
+ "CVE-2025-24993",
382
+ "CVE-2025-25181",
383
+ "CVE-2025-26633",
384
+ "CVE-2025-2783",
385
+ "CVE-2025-29824",
386
+ "CVE-2025-30406",
349
387
  "CVE-2025-31200",
350
388
  "CVE-2025-31201",
351
389
  "CVE-2025-34028",
@@ -359,6 +397,8 @@
359
397
  "CVE-2026-34908",
360
398
  "CVE-2026-34909",
361
399
  "CVE-2026-34910",
400
+ "CVE-2026-45659",
401
+ "CVE-2026-48558",
362
402
  "CVE-2026-48907",
363
403
  "CVE-2026-54420"
364
404
  ],
@@ -492,7 +532,7 @@
492
532
  "Treating 'Top 25 addressed' as a compliance signal creates a compliance-theatre risk for organisations with significant AI surface",
493
533
  "No cross-walk requirement to ATLAS TTPs — CWE addresses weaknesses; ATLAS addresses adversary techniques. Both are needed for AI coverage"
494
534
  ],
495
- "real_requirement": "Programmes that claim 'Top 25 addressed' as compliance evidence must additionally: (1) enumerate AI-relevant CWEs outside the Top 25 (CWE-1426 Improper Output Validation, CWE-1039 Inadequate Detection of Adversarial Input, CWE-1230 Exposure of Sensitive Info Through Metadata) with explicit treatment, (2) cross-walk to ATLAS v2026.05 TTPs for adversarial coverage, (3) re-baseline against the next-published Top 25 with delta analysis. Aligns with EU CRA Annex I, UK NCSC, AU ISM, ISO 27001 A.8.28.",
535
+ "real_requirement": "Programmes that claim 'Top 25 addressed' as compliance evidence must additionally: (1) enumerate AI-relevant CWEs outside the Top 25 (CWE-1426 Improper Output Validation, CWE-1039 Inadequate Detection of Adversarial Input, CWE-1230 Exposure of Sensitive Info Through Metadata) with explicit treatment, (2) cross-walk to ATLAS v2026.06 TTPs for adversarial coverage, (3) re-baseline against the next-published Top 25 with delta analysis. Aligns with EU CRA Annex I, UK NCSC, AU ISM, ISO 27001 A.8.28.",
496
536
  "status": "open",
497
537
  "opened_date": "2026-05-11",
498
538
  "evidence_cves": [],
@@ -1221,6 +1261,7 @@
1221
1261
  "status": "open",
1222
1262
  "opened_date": "2026-05-11",
1223
1263
  "evidence_cves": [
1264
+ "CVE-2025-1316",
1224
1265
  "CVE-2025-67038"
1225
1266
  ],
1226
1267
  "atlas_refs": [
@@ -1463,19 +1504,25 @@
1463
1504
  "CVE-2016-10033",
1464
1505
  "CVE-2016-7836",
1465
1506
  "CVE-2017-1000353",
1507
+ "CVE-2017-12637",
1508
+ "CVE-2017-3066",
1466
1509
  "CVE-2017-7921",
1467
1510
  "CVE-2018-14634",
1468
1511
  "CVE-2018-4063",
1512
+ "CVE-2018-8639",
1469
1513
  "CVE-2019-19006",
1470
1514
  "CVE-2019-5418",
1471
1515
  "CVE-2019-6693",
1472
1516
  "CVE-2019-9621",
1517
+ "CVE-2019-9874",
1518
+ "CVE-2019-9875",
1473
1519
  "CVE-2020-17103-REREGRESSION-2026",
1474
1520
  "CVE-2020-24363",
1475
1521
  "CVE-2020-25078",
1476
1522
  "CVE-2020-25079",
1477
1523
  "CVE-2020-7796",
1478
1524
  "CVE-2020-9715",
1525
+ "CVE-2021-20035",
1479
1526
  "CVE-2021-21311",
1480
1527
  "CVE-2021-22054",
1481
1528
  "CVE-2021-22175",
@@ -1494,12 +1541,16 @@
1494
1541
  "CVE-2022-20775",
1495
1542
  "CVE-2022-37055",
1496
1543
  "CVE-2022-40799",
1544
+ "CVE-2022-43769",
1545
+ "CVE-2022-43939",
1497
1546
  "CVE-2022-48503",
1498
1547
  "CVE-2023-0386",
1548
+ "CVE-2023-20118",
1499
1549
  "CVE-2023-21529",
1500
1550
  "CVE-2023-2533",
1501
1551
  "CVE-2023-27351",
1502
1552
  "CVE-2023-33538",
1553
+ "CVE-2023-34192",
1503
1554
  "CVE-2023-36424",
1504
1555
  "CVE-2023-38950",
1505
1556
  "CVE-2023-39780",
@@ -1528,8 +1579,13 @@
1528
1579
  "CVE-2024-11394",
1529
1580
  "CVE-2024-12987",
1530
1581
  "CVE-2024-13059",
1582
+ "CVE-2024-13159",
1583
+ "CVE-2024-13160",
1584
+ "CVE-2024-13161",
1531
1585
  "CVE-2024-1561",
1532
1586
  "CVE-2024-1708",
1587
+ "CVE-2024-20439",
1588
+ "CVE-2024-20953",
1533
1589
  "CVE-2024-21513",
1534
1590
  "CVE-2024-21575",
1535
1591
  "CVE-2024-21576",
@@ -1545,12 +1601,19 @@
1545
1601
  "CVE-2024-42478",
1546
1602
  "CVE-2024-42479",
1547
1603
  "CVE-2024-43468",
1604
+ "CVE-2024-48248",
1605
+ "CVE-2024-4885",
1548
1606
  "CVE-2024-4889",
1607
+ "CVE-2024-49035",
1549
1608
  "CVE-2024-50050",
1609
+ "CVE-2024-50302",
1610
+ "CVE-2024-53150",
1611
+ "CVE-2024-53197",
1550
1612
  "CVE-2024-54085",
1551
1613
  "CVE-2024-56145",
1552
1614
  "CVE-2024-57726",
1553
1615
  "CVE-2024-57728",
1616
+ "CVE-2024-57968",
1554
1617
  "CVE-2024-58136",
1555
1618
  "CVE-2024-6047",
1556
1619
  "CVE-2024-6587",
@@ -1558,12 +1621,14 @@
1558
1621
  "CVE-2024-7694",
1559
1622
  "CVE-2024-8068",
1560
1623
  "CVE-2024-8069",
1624
+ "CVE-2025-0111",
1561
1625
  "CVE-2025-0282",
1562
1626
  "CVE-2025-10035",
1563
1627
  "CVE-2025-10585",
1564
1628
  "CVE-2025-11371",
1565
1629
  "CVE-2025-11953",
1566
1630
  "CVE-2025-12480",
1631
+ "CVE-2025-1316",
1567
1632
  "CVE-2025-13223",
1568
1633
  "CVE-2025-14174",
1569
1634
  "CVE-2025-14611",
@@ -1582,15 +1647,26 @@
1582
1647
  "CVE-2025-21043",
1583
1648
  "CVE-2025-21479",
1584
1649
  "CVE-2025-21480",
1650
+ "CVE-2025-21590",
1585
1651
  "CVE-2025-22457",
1586
1652
  "CVE-2025-23254",
1587
1653
  "CVE-2025-24016",
1588
1654
  "CVE-2025-24054",
1589
1655
  "CVE-2025-24201",
1656
+ "CVE-2025-24472",
1657
+ "CVE-2025-24813",
1590
1658
  "CVE-2025-24893",
1659
+ "CVE-2025-24983",
1660
+ "CVE-2025-24984",
1661
+ "CVE-2025-24985",
1662
+ "CVE-2025-24989",
1591
1663
  "CVE-2025-24990",
1664
+ "CVE-2025-24991",
1665
+ "CVE-2025-24993",
1666
+ "CVE-2025-25181",
1592
1667
  "CVE-2025-25257",
1593
1668
  "CVE-2025-26399",
1669
+ "CVE-2025-26633",
1594
1670
  "CVE-2025-27038",
1595
1671
  "CVE-2025-27363",
1596
1672
  "CVE-2025-2746",
@@ -1598,13 +1674,16 @@
1598
1674
  "CVE-2025-2749",
1599
1675
  "CVE-2025-2775",
1600
1676
  "CVE-2025-2776",
1677
+ "CVE-2025-2783",
1601
1678
  "CVE-2025-27915",
1602
1679
  "CVE-2025-27920",
1603
1680
  "CVE-2025-29635",
1681
+ "CVE-2025-29824",
1604
1682
  "CVE-2025-30165",
1605
1683
  "CVE-2025-30202",
1606
1684
  "CVE-2025-30397",
1607
1685
  "CVE-2025-30400",
1686
+ "CVE-2025-30406",
1608
1687
  "CVE-2025-31125",
1609
1688
  "CVE-2025-31161",
1610
1689
  "CVE-2025-31200",
@@ -1797,11 +1876,13 @@
1797
1876
  "CVE-2026-42945",
1798
1877
  "CVE-2026-45247",
1799
1878
  "CVE-2026-45498",
1879
+ "CVE-2026-45659",
1800
1880
  "CVE-2026-45829",
1801
1881
  "CVE-2026-46300",
1802
1882
  "CVE-2026-46333",
1803
1883
  "CVE-2026-48027",
1804
1884
  "CVE-2026-48172",
1885
+ "CVE-2026-48558",
1805
1886
  "CVE-2026-48907",
1806
1887
  "CVE-2026-50751",
1807
1888
  "CVE-2026-5281",
@@ -1870,7 +1951,7 @@
1870
1951
  "LLM-API-as-C2 (SesameOp pattern, ATLAS AML.T0096) is not in the clause 6.1.2 example threat list — risk register templates omit it",
1871
1952
  "No requirement to link AI risk register entries to specific TTP IDs (ATLAS / ATT&CK) — risks remain framework-internal abstractions"
1872
1953
  ],
1873
- "real_requirement": "Clause 6.1.2 risk registers must (1) ingest ATLAS v2026.05 TTPs as enumerated AI-specific threat sources, (2) cross-reference jurisdictional obligations (EU AI Act Annex III, NIS2 Art. 21, DORA Art. 28, UK CAF B4, AU ISM AI annex, ISO 27001:2022 A.5.7), (3) include AI-API-as-C2 and prompt-injection-as-RCE as named scenarios, (4) be re-run on threat-intel triggers, not only on calendar cycles.",
1954
+ "real_requirement": "Clause 6.1.2 risk registers must (1) ingest ATLAS v2026.06 TTPs as enumerated AI-specific threat sources, (2) cross-reference jurisdictional obligations (EU AI Act Annex III, NIS2 Art. 21, DORA Art. 28, UK CAF B4, AU ISM AI annex, ISO 27001:2022 A.5.7), (3) include AI-API-as-C2 and prompt-injection-as-RCE as named scenarios, (4) be re-run on threat-intel triggers, not only on calendar cycles.",
1874
1955
  "status": "open",
1875
1956
  "opened_date": "2026-05-11",
1876
1957
  "evidence_cves": [],
@@ -2419,6 +2500,7 @@
2419
2500
  "status": "open",
2420
2501
  "opened_date": "2026-05-01",
2421
2502
  "evidence_cves": [
2503
+ "CVE-2021-20035",
2422
2504
  "CVE-2022-36551",
2423
2505
  "CVE-2023-44221",
2424
2506
  "CVE-2023-48022",
@@ -2436,7 +2518,9 @@
2436
2518
  "CVE-2024-42479",
2437
2519
  "CVE-2024-6047",
2438
2520
  "CVE-2025-1976",
2521
+ "CVE-2025-21590",
2439
2522
  "CVE-2025-23266",
2523
+ "CVE-2025-24472",
2440
2524
  "CVE-2025-25297",
2441
2525
  "CVE-2025-30202",
2442
2526
  "CVE-2025-32444",
@@ -2680,19 +2764,25 @@
2680
2764
  "CVE-2016-10033",
2681
2765
  "CVE-2016-7836",
2682
2766
  "CVE-2017-1000353",
2767
+ "CVE-2017-12637",
2768
+ "CVE-2017-3066",
2683
2769
  "CVE-2017-7921",
2684
2770
  "CVE-2018-14634",
2685
2771
  "CVE-2018-4063",
2772
+ "CVE-2018-8639",
2686
2773
  "CVE-2019-19006",
2687
2774
  "CVE-2019-5418",
2688
2775
  "CVE-2019-6693",
2689
2776
  "CVE-2019-9621",
2777
+ "CVE-2019-9874",
2778
+ "CVE-2019-9875",
2690
2779
  "CVE-2020-17103-REREGRESSION-2026",
2691
2780
  "CVE-2020-24363",
2692
2781
  "CVE-2020-25078",
2693
2782
  "CVE-2020-25079",
2694
2783
  "CVE-2020-7796",
2695
2784
  "CVE-2020-9715",
2785
+ "CVE-2021-20035",
2696
2786
  "CVE-2021-21311",
2697
2787
  "CVE-2021-22054",
2698
2788
  "CVE-2021-22175",
@@ -2712,12 +2802,16 @@
2712
2802
  "CVE-2022-20775",
2713
2803
  "CVE-2022-37055",
2714
2804
  "CVE-2022-40799",
2805
+ "CVE-2022-43769",
2806
+ "CVE-2022-43939",
2715
2807
  "CVE-2022-48503",
2716
2808
  "CVE-2023-0386",
2809
+ "CVE-2023-20118",
2717
2810
  "CVE-2023-21529",
2718
2811
  "CVE-2023-2533",
2719
2812
  "CVE-2023-27351",
2720
2813
  "CVE-2023-33538",
2814
+ "CVE-2023-34192",
2721
2815
  "CVE-2023-3519",
2722
2816
  "CVE-2023-36424",
2723
2817
  "CVE-2023-38950",
@@ -2748,8 +2842,13 @@
2748
2842
  "CVE-2024-11394",
2749
2843
  "CVE-2024-12987",
2750
2844
  "CVE-2024-13059",
2845
+ "CVE-2024-13159",
2846
+ "CVE-2024-13160",
2847
+ "CVE-2024-13161",
2751
2848
  "CVE-2024-1561",
2752
2849
  "CVE-2024-1708",
2850
+ "CVE-2024-20439",
2851
+ "CVE-2024-20953",
2753
2852
  "CVE-2024-21182",
2754
2853
  "CVE-2024-21513",
2755
2854
  "CVE-2024-21575",
@@ -2768,12 +2867,19 @@
2768
2867
  "CVE-2024-42478",
2769
2868
  "CVE-2024-42479",
2770
2869
  "CVE-2024-43468",
2870
+ "CVE-2024-48248",
2871
+ "CVE-2024-4885",
2771
2872
  "CVE-2024-4889",
2873
+ "CVE-2024-49035",
2772
2874
  "CVE-2024-50050",
2875
+ "CVE-2024-50302",
2876
+ "CVE-2024-53150",
2877
+ "CVE-2024-53197",
2773
2878
  "CVE-2024-54085",
2774
2879
  "CVE-2024-56145",
2775
2880
  "CVE-2024-57726",
2776
2881
  "CVE-2024-57728",
2882
+ "CVE-2024-57968",
2777
2883
  "CVE-2024-58136",
2778
2884
  "CVE-2024-6047",
2779
2885
  "CVE-2024-6587",
@@ -2781,6 +2887,7 @@
2781
2887
  "CVE-2024-7694",
2782
2888
  "CVE-2024-8068",
2783
2889
  "CVE-2024-8069",
2890
+ "CVE-2025-0111",
2784
2891
  "CVE-2025-0282",
2785
2892
  "CVE-2025-10035",
2786
2893
  "CVE-2025-10164",
@@ -2789,6 +2896,7 @@
2789
2896
  "CVE-2025-11953",
2790
2897
  "CVE-2025-12480",
2791
2898
  "CVE-2025-12686",
2899
+ "CVE-2025-1316",
2792
2900
  "CVE-2025-13223",
2793
2901
  "CVE-2025-14174",
2794
2902
  "CVE-2025-14611",
@@ -2807,16 +2915,27 @@
2807
2915
  "CVE-2025-21043",
2808
2916
  "CVE-2025-21479",
2809
2917
  "CVE-2025-21480",
2918
+ "CVE-2025-21590",
2810
2919
  "CVE-2025-22457",
2811
2920
  "CVE-2025-23254",
2812
2921
  "CVE-2025-23266",
2813
2922
  "CVE-2025-24016",
2814
2923
  "CVE-2025-24054",
2815
2924
  "CVE-2025-24201",
2925
+ "CVE-2025-24472",
2926
+ "CVE-2025-24813",
2816
2927
  "CVE-2025-24893",
2928
+ "CVE-2025-24983",
2929
+ "CVE-2025-24984",
2930
+ "CVE-2025-24985",
2931
+ "CVE-2025-24989",
2817
2932
  "CVE-2025-24990",
2933
+ "CVE-2025-24991",
2934
+ "CVE-2025-24993",
2935
+ "CVE-2025-25181",
2818
2936
  "CVE-2025-25257",
2819
2937
  "CVE-2025-26399",
2938
+ "CVE-2025-26633",
2820
2939
  "CVE-2025-27038",
2821
2940
  "CVE-2025-27363",
2822
2941
  "CVE-2025-2746",
@@ -2824,13 +2943,16 @@
2824
2943
  "CVE-2025-2749",
2825
2944
  "CVE-2025-2775",
2826
2945
  "CVE-2025-2776",
2946
+ "CVE-2025-2783",
2827
2947
  "CVE-2025-27915",
2828
2948
  "CVE-2025-27920",
2829
2949
  "CVE-2025-29635",
2950
+ "CVE-2025-29824",
2830
2951
  "CVE-2025-30165",
2831
2952
  "CVE-2025-30202",
2832
2953
  "CVE-2025-30397",
2833
2954
  "CVE-2025-30400",
2955
+ "CVE-2025-30406",
2834
2956
  "CVE-2025-31125",
2835
2957
  "CVE-2025-31161",
2836
2958
  "CVE-2025-31200",
@@ -3036,9 +3158,11 @@
3036
3158
  "CVE-2026-43500",
3037
3159
  "CVE-2026-45247",
3038
3160
  "CVE-2026-45498",
3161
+ "CVE-2026-45659",
3039
3162
  "CVE-2026-45829",
3040
3163
  "CVE-2026-46300",
3041
3164
  "CVE-2026-46333",
3165
+ "CVE-2026-48558",
3042
3166
  "CVE-2026-48907",
3043
3167
  "CVE-2026-50751",
3044
3168
  "CVE-2026-5281",
@@ -3213,6 +3337,7 @@
3213
3337
  "status": "open",
3214
3338
  "opened_date": "2026-05-11",
3215
3339
  "evidence_cves": [
3340
+ "CVE-2025-1316",
3216
3341
  "CVE-2025-67038"
3217
3342
  ],
3218
3343
  "atlas_refs": [
@@ -5307,16 +5432,50 @@
5307
5432
  "status": "open",
5308
5433
  "opened_date": "2026-05-15",
5309
5434
  "evidence_cves": [
5435
+ "CVE-2017-12637",
5436
+ "CVE-2017-3066",
5437
+ "CVE-2018-8639",
5438
+ "CVE-2019-9874",
5439
+ "CVE-2019-9875",
5440
+ "CVE-2022-43769",
5441
+ "CVE-2022-43939",
5442
+ "CVE-2023-20118",
5443
+ "CVE-2023-34192",
5310
5444
  "CVE-2023-3519",
5311
5445
  "CVE-2023-6571",
5312
5446
  "CVE-2024-12366",
5447
+ "CVE-2024-13159",
5448
+ "CVE-2024-13160",
5449
+ "CVE-2024-13161",
5450
+ "CVE-2024-20439",
5451
+ "CVE-2024-20953",
5313
5452
  "CVE-2024-2912",
5314
5453
  "CVE-2024-38475",
5454
+ "CVE-2024-48248",
5455
+ "CVE-2024-4885",
5456
+ "CVE-2024-49035",
5457
+ "CVE-2024-50302",
5458
+ "CVE-2024-53150",
5459
+ "CVE-2024-53197",
5315
5460
  "CVE-2024-5565",
5461
+ "CVE-2024-57968",
5316
5462
  "CVE-2024-58136",
5317
5463
  "CVE-2024-9526",
5464
+ "CVE-2025-0111",
5318
5465
  "CVE-2025-24054",
5466
+ "CVE-2025-24813",
5467
+ "CVE-2025-24983",
5468
+ "CVE-2025-24984",
5469
+ "CVE-2025-24985",
5470
+ "CVE-2025-24989",
5471
+ "CVE-2025-24991",
5472
+ "CVE-2025-24993",
5473
+ "CVE-2025-25181",
5474
+ "CVE-2025-26633",
5319
5475
  "CVE-2025-27520",
5476
+ "CVE-2025-2783",
5477
+ "CVE-2025-29824",
5478
+ "CVE-2025-30406",
5320
5479
  "CVE-2025-31200",
5321
5480
  "CVE-2025-31201",
5322
5481
  "CVE-2025-34028",
@@ -5328,6 +5487,8 @@
5328
5487
  "CVE-2026-12569",
5329
5488
  "CVE-2026-20253",
5330
5489
  "CVE-2026-42945",
5490
+ "CVE-2026-45659",
5491
+ "CVE-2026-48558",
5331
5492
  "CVE-2026-48907",
5332
5493
  "CVE-2026-54420"
5333
5494
  ],
@@ -5701,6 +5862,7 @@
5701
5862
  "CVE-2025-21042",
5702
5863
  "CVE-2025-21043",
5703
5864
  "CVE-2025-24016",
5865
+ "CVE-2025-24472",
5704
5866
  "CVE-2025-24893",
5705
5867
  "CVE-2025-25257",
5706
5868
  "CVE-2025-26399",
@@ -6037,11 +6199,21 @@
6037
6199
  "opened_date": "2026-05-17",
6038
6200
  "evidence_cves": [
6039
6201
  "CVE-2011-0411",
6202
+ "CVE-2017-12637",
6203
+ "CVE-2017-3066",
6204
+ "CVE-2018-8639",
6205
+ "CVE-2019-9874",
6206
+ "CVE-2019-9875",
6207
+ "CVE-2021-20035",
6040
6208
  "CVE-2021-33515",
6041
6209
  "CVE-2021-38371",
6042
6210
  "CVE-2022-0492",
6043
6211
  "CVE-2022-23812",
6044
6212
  "CVE-2022-36551",
6213
+ "CVE-2022-43769",
6214
+ "CVE-2022-43939",
6215
+ "CVE-2023-20118",
6216
+ "CVE-2023-34192",
6045
6217
  "CVE-2023-43791",
6046
6218
  "CVE-2023-44221",
6047
6219
  "CVE-2023-44467",
@@ -6059,7 +6231,12 @@
6059
6231
  "CVE-2024-12366",
6060
6232
  "CVE-2024-12450",
6061
6233
  "CVE-2024-13059",
6234
+ "CVE-2024-13159",
6235
+ "CVE-2024-13160",
6236
+ "CVE-2024-13161",
6062
6237
  "CVE-2024-1561",
6238
+ "CVE-2024-20439",
6239
+ "CVE-2024-20953",
6063
6240
  "CVE-2024-21182",
6064
6241
  "CVE-2024-21513",
6065
6242
  "CVE-2024-21575",
@@ -6077,26 +6254,49 @@
6077
6254
  "CVE-2024-39722",
6078
6255
  "CVE-2024-42478",
6079
6256
  "CVE-2024-42479",
6257
+ "CVE-2024-48248",
6258
+ "CVE-2024-4885",
6259
+ "CVE-2024-49035",
6080
6260
  "CVE-2024-50050",
6261
+ "CVE-2024-50302",
6262
+ "CVE-2024-53150",
6263
+ "CVE-2024-53197",
6081
6264
  "CVE-2024-5565",
6265
+ "CVE-2024-57968",
6082
6266
  "CVE-2024-58136",
6083
6267
  "CVE-2024-6047",
6084
6268
  "CVE-2024-9526",
6269
+ "CVE-2025-0111",
6085
6270
  "CVE-2025-0282",
6086
6271
  "CVE-2025-10164",
6272
+ "CVE-2025-1316",
6087
6273
  "CVE-2025-1550",
6088
6274
  "CVE-2025-1753",
6089
6275
  "CVE-2025-1976",
6276
+ "CVE-2025-21590",
6090
6277
  "CVE-2025-22457",
6091
6278
  "CVE-2025-23254",
6092
6279
  "CVE-2025-23266",
6093
6280
  "CVE-2025-24054",
6281
+ "CVE-2025-24472",
6282
+ "CVE-2025-24813",
6283
+ "CVE-2025-24983",
6284
+ "CVE-2025-24984",
6285
+ "CVE-2025-24985",
6286
+ "CVE-2025-24989",
6287
+ "CVE-2025-24991",
6288
+ "CVE-2025-24993",
6289
+ "CVE-2025-25181",
6094
6290
  "CVE-2025-25297",
6291
+ "CVE-2025-26633",
6095
6292
  "CVE-2025-27363",
6096
6293
  "CVE-2025-27520",
6294
+ "CVE-2025-2783",
6295
+ "CVE-2025-29824",
6097
6296
  "CVE-2025-30165",
6098
6297
  "CVE-2025-30202",
6099
6298
  "CVE-2025-30400",
6299
+ "CVE-2025-30406",
6100
6300
  "CVE-2025-31161",
6101
6301
  "CVE-2025-31200",
6102
6302
  "CVE-2025-31201",
@@ -6161,10 +6361,12 @@
6161
6361
  "CVE-2026-42271",
6162
6362
  "CVE-2026-45247",
6163
6363
  "CVE-2026-45498",
6364
+ "CVE-2026-45659",
6164
6365
  "CVE-2026-45829",
6165
6366
  "CVE-2026-46300",
6166
6367
  "CVE-2026-46333",
6167
6368
  "CVE-2026-48172",
6369
+ "CVE-2026-48558",
6168
6370
  "CVE-2026-48907",
6169
6371
  "CVE-2026-54420",
6170
6372
  "CVE-2026-5760",
@@ -6764,6 +6966,7 @@
6764
6966
  "status": "open",
6765
6967
  "opened_date": "2026-05-18",
6766
6968
  "evidence_cves": [
6969
+ "CVE-2021-20035",
6767
6970
  "CVE-2022-36551",
6768
6971
  "CVE-2023-44221",
6769
6972
  "CVE-2023-44487",
@@ -6777,8 +6980,11 @@
6777
6980
  "CVE-2024-31462",
6778
6981
  "CVE-2025-0282",
6779
6982
  "CVE-2025-10164",
6983
+ "CVE-2025-1316",
6780
6984
  "CVE-2025-1976",
6985
+ "CVE-2025-21590",
6781
6986
  "CVE-2025-22457",
6987
+ "CVE-2025-24472",
6782
6988
  "CVE-2025-25297",
6783
6989
  "CVE-2025-31161",
6784
6990
  "CVE-2025-31324",
@@ -7426,7 +7632,7 @@
7426
7632
  }
7427
7633
  },
7428
7634
  "ATLAS-AML.T0048": {
7429
- "framework": "MITRE ATLAS v2026.05",
7635
+ "framework": "MITRE ATLAS v2026.06",
7430
7636
  "control_id": "AML.T0048",
7431
7637
  "control_name": "External Harms — ML Supply Chain Compromise (bundled-codec / inference-server class)",
7432
7638
  "designed_for": "ATLAS AML.T0048 catalogues external harms from ML supply-chain compromise, including malicious model weights, poisoned training data, and compromised ML libraries. The technique-level guidance covers detection and mitigation at the model-artifact and library-consumption layer.",