RosmarOps Observatory
Agent security today: 1 November 2026
What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.
No security changes found in the sources we checked.
What we checked
- Claude Code · 2.1.316 · 31 October 2026
- Cursor · CLI v2026.10.22 · 20 October 2026
- OpenAI Codex · rust-v0.166.0 · 29 October 2026
- Google Antigravity · App 2.28.2 · 29 October 2026
- Hermes Agent · v0.22.5 · 23 October 2026
- GitHub Copilot · 28 October 2026
- Cline · v4.1.26 · 25 October 2026
- Continue · v2.1.0-vscode · 18 June 2026
- Kanvas · v0.4.0 · 27 October 2026
- OpenSSF malicious-packages
- Gemini CLI · v0.66.0 · 27 October 2026
- GitHub Copilot CLI · 1.0.105 · 27 October 2026
- Claude desktop · 21 October 2026
- OSV npm and PyPI
- NVD
From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.
