RosmarOps Observatory
Agent security today: 30 October 2026
What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.
No changes found in the 14 sources checked today. Not checked: OpenAI Codex.
What we checked
- Claude Code · 2.1.314 · 30 October 2026
- Cursor · CLI v2026.10.22 · 20 October 2026
- Google Antigravity · CLI 1.4.10 · 29 October 2026
- Hermes Agent · v0.22.5 · 23 October 2026
- GitHub Copilot · 28 October 2026
- Cline · v4.1.26 · 25 October 2026
- Continue · v2.1.0-vscode · 18 June 2026
- Kanvas · v0.4.0 · 27 October 2026
- OpenSSF malicious-packages
- Gemini CLI · v0.66.0 · 27 October 2026
- GitHub Copilot CLI · 1.0.105 · 27 October 2026
- Claude desktop · 21 October 2026
- OSV npm and PyPI
- NVD
From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.