agent-threat-rules CDN files

jsDelivr monthly hits badge
  1. agent-threat-rules@4.3.1 /
  2. rules /
  3. tool-poisoning
...
ATR-2026-00010-mcp-malicious-response.yaml 13.82 KB
ATR-2026-00011-tool-output-injection.yaml 9.5 KB
ATR-2026-00012-unauthorized-tool-call.yaml 15.19 KB
ATR-2026-00013-tool-ssrf.yaml 12.22 KB
ATR-2026-00095-supply-chain-poisoning.yaml 6.89 KB
ATR-2026-00096-registry-poisoning.yaml 7.5 KB
ATR-2026-00100-consent-bypass-instruction.yaml 5.12 KB
ATR-2026-00101-trust-escalation-override.yaml 4.5 KB
ATR-2026-00103-hidden-safety-bypass-instruction.yaml 4.47 KB
ATR-2026-00105-silent-action-concealment.yaml 4.76 KB
ATR-2026-00106-schema-description-contradiction.yaml 3.98 KB
ATR-2026-00161-important-tag-cross-tool-shadowing.yaml 9.15 KB
ATR-2026-00209-mcpwn-runaway-invocation.yaml 6.7 KB
ATR-2026-00210-flowise-system-message-override.yaml 6.46 KB
ATR-2026-00259-ansi-escape-injection.yaml 5.42 KB
ATR-2026-00270-xss-in-tool-response.yaml 6.15 KB
ATR-2026-00277-echo-template-command-injection.yaml 7.12 KB
ATR-2026-00393-ansi-code-elicitation-request.yaml 7.46 KB
ATR-2026-00415-flowise-custom-mcp-stdio-rce.yaml 6.77 KB
ATR-2026-00419-cursor-mcp-zero-click-config.yaml 8.69 KB
ATR-2026-00434-mcp-remote-authorization-endpoint-command-injection.yaml 6.1 KB
ATR-2026-00435-azure-mcp-server-missing-authentication.yaml 6.1 KB
ATR-2026-00448-spring-ai-milvus-filter-injection.yaml 7.75 KB
ATR-2026-00494-garak-exploitation-mixedunassigned.yaml 6.71 KB
ATR-2026-00513-package-hallucination-exploitation.yaml 7.63 KB
ATR-2026-00521-shell-command-injection-agent-tool-context.yaml 6.62 KB
ATR-2026-00522-sql-injection-natural-language-agent-interface.yaml 8.74 KB
ATR-2026-00526-claude-code-shell-metachar-in-double-quoted-path.yaml 5.64 KB
ATR-2026-00529-litellm-proxy-sqli-cisa-kev.yaml 5.34 KB
ATR-2026-00530-ms-agent-shell-tool-unsanitized-argv-rce.yaml 5.97 KB
ATR-2026-00531-praisonai-unauthenticated-agent-api.yaml 6.7 KB
ATR-2026-00532-apache-doris-mcp-sql-injection.yaml 5.27 KB
ATR-2026-00533-apache-pinot-mcp-unauthenticated-takeover.yaml 5.35 KB
ATR-2026-00534-alibaba-rds-mcp-unauthenticated-metadata-exfil.yaml 5.92 KB
ATR-2026-00536-nginx-ui-mcp-unauthenticated-command-execution.yaml 7.58 KB
ATR-2026-00537-fastmcp-server-name-cmd-injection-windows.yaml 6.61 KB
ATR-2026-00538-langchain-chatchat-mcp-stdio-unauthenticated-rce.yaml 8.31 KB
ATR-2026-00540-praisonai-parse-mcp-command-cli-injection.yaml 6.25 KB
ATR-2026-00541-agent-zero-mcp-config-command-injection.yaml 6.55 KB
ATR-2026-00542-upsonic-mcp-command-allowlist-bypass.yaml 5.91 KB
ATR-2026-00543-litellm-mcp-server-argv-injection.yaml 6.39 KB
ATR-2026-00544-praisonai-pth-file-path-traversal-rce.yaml 6.18 KB
ATR-2026-00545-praisonai-tool-override-unauth-rce.yaml 6.21 KB
ATR-2026-00561-fastmcp-vulnerable-to-windows-command-in.yaml 4.78 KB
ATR-2026-00567-mcp-stdio-config-command-injection.yaml 4.01 KB
ATR-2026-00568-agent-ssrf-cloud-metadata-file-inclusion.yaml 3.53 KB
ATR-2026-00572-symjack-symlink-config-redirection.yaml 7.02 KB
ATR-2026-00575-miasma-npm-worm-agent-config-backdoor.yaml 7.41 KB
ATR-2026-00576-hades-agent-credential-theft.yaml 7.56 KB
ATR-2026-00577-create-mcp-server-stdio-exec-command-injection.yaml 9.57 KB
ATR-2026-00581-mcp-tool-rug-pull-post-approval-redefinition.yaml 10.08 KB
ATR-2026-00714-tool-camouflage-forced-tool-call.yaml 3.94 KB
ATR-2026-00715-tool-knowledge-hijack-identity-injection.yaml 4.74 KB
ATR-2026-00716-ipi-data-destruction-carrier.yaml 4.15 KB
ATR-2026-00720-tool-misuse-privilege-escalation-social.yaml 4.1 KB
ATR-2026-01300-mcp-notes-param-chat-history-exfil.yaml 5.14 KB
ATR-2026-01301-tool-description-exclusive-tool-override.yaml 4.39 KB
ATR-2026-01302-fake-tool-result-instruction-injection.yaml 4.33 KB
ATR-2026-01303-tool-schema-enumeration-social-engineering.yaml 6.58 KB
ATR-2026-01306-mcp-oauth-command-injection.yaml 4.1 KB
ATR-2026-01307-mcp-dns-rebinding-attack.yaml 4.27 KB
ATR-2026-01310-mcp-tool-description-compliance-history-exfil.yaml 6.01 KB
ATR-2026-01775-semantic-mcp-tool-manifest-poisoning.yaml 9.73 KB
ATR-2026-01927-mcp-server-kubernetes-kubectl-command-injection.yaml 6.98 KB
ATR-2026-01928-framelink-figma-mcp-curl-fallback-command-injection.yaml 9.15 KB
ATR-2026-01930-mcp-sampling-prompt-injection.yaml 7.97 KB
ATR-2026-01931-gemini-mcp-tool-command-injection-file-exfil.yaml 5.83 KB
ATR-2026-01932-shadow-undeclared-mcp-server-registration.yaml 6.19 KB
ATR-2026-01935-litellm-custom-code-sandbox-escape-cve-2026-40217.yaml 5.26 KB
ATR-2026-01952-praisonai-codemode-sandbox-escape-rce.yaml 5.19 KB
ATR-2026-01953-praisonai-codemode-function-ctor-sandbox-escape.yaml 5.53 KB
ATR-2026-01959-openhuman-shell-allowlist-env-prefix-bypass.yaml 6 KB
ATR-2026-01963-praisonai-action-orchestrator-step-target-path-traversal-rce.yaml 5.56 KB
ATR-2026-01965-flowise-custommcp-os-command-rce.yaml 5.35 KB
ATR-2026-01967-deepchat-mermaid-xss-rce-ipc-mcp-register.yaml 5.08 KB
ATR-2026-01968-deepchat-markdown-deeplink-openexternal-rce-bypass.yaml 5.85 KB
ATR-2026-01970-praisonai-filetools-normpath-path-traversal.yaml 5.55 KB
ATR-2026-01973-anythingllm-logo-endpoint-path-traversal.yaml 4.42 KB
ATR-2026-01978-anythingllm-collector-process-filename-path-traversal-delete.yaml 4.82 KB
ATR-2026-01979-pandasai-prompt-injection-dunder-sandbox-escape-rce.yaml 5.58 KB
ATR-2026-01980-agentic-flow-mcp-tool-param-command-injection.yaml 5.78 KB
ATR-2026-01982-dbt-mcp-node-selection-argument-injection.yaml 5.88 KB
ATR-2026-01983-mcp-for-stata-log-file-name-command-injection.yaml 5.63 KB
ATR-2026-01985-mcp-connect-bridge-unauth-process-spawn-rce.yaml 6.79 KB
ATR-2026-01987-langroid-sqlchatagent-prompt-to-sql-rce.yaml 5.54 KB
ATR-2026-02021-mcp-inspector-unauthenticated-proxy-rce.yaml 6.57 KB
ATR-2026-02022-curxecute-cursor-mcp-json-injected-server-rce.yaml 7.75 KB
ATR-2026-02023-escaperoute-filesystem-mcp-prefix-bypass.yaml 8.02 KB
ATR-2026-02024-escaperoute-filesystem-mcp-symlink-launchagent.yaml 7.29 KB
ATR-2026-02025-mcp-full-schema-poisoning-nondescription-field.yaml 8.66 KB
ATR-2026-02027-diagnostic-content-remediation-command-injection.yaml 5.96 KB
ATR-2026-02041-shell-injection-echo-marker-poc.yaml 6.15 KB
ATR-2026-02102-html-injection-tool-arg-approval-ui-xss.yaml 6.3 KB
ATR-2026-02141-mcp-server-config-command-execution.yaml 6.34 KB
ATR-2026-02145-python-sandbox-escape-generator-frame-introspection.yaml 5.65 KB
ATR-2026-02193-ssrf-ipv6-noncanonical-loopback-bypass.yaml 4.56 KB
ATR-2026-02194-go-init-func-process-exec-codegen-rce.yaml 4.95 KB
ATR-2026-02233-unscoped-destructive-db-request-nl.yaml 5.42 KB
ATR-2026-02260-agentjacking-remediation-framed-execution.yaml 7.97 KB
ATR-2026-02263-workflow-sql-template-expression-injection.yaml 6.07 KB
ATR-2026-02350-mcp-json-rpc-case-duplicate-key-tool-smuggling.yaml 6.75 KB
ATR-2026-02352-imap-search-command-injection-email-tool-args.yaml 5.09 KB
ATR-2026-02372-unsigned-task-feed-npm-npx-lifecycle-rce.yaml 6.9 KB
ATR-2026-02376-tool-description-conversational-trigger-history-exfil.yaml 5.19 KB
ATR-2026-02403-mcp-external-content-missing-spotlighting.yaml 16.3 KB
ATR-2026-02514-mcp-server-metadata-url-html-breakout.yaml 6.76 KB
ATR-2026-02542-pipeline-query-stage-injection.yaml 8.53 KB
ATR-2026-02557-shell-separator-in-path-typed-tool-argument.yaml 9.98 KB
ATR-2026-02666-url-userinfo-decoy-host-allowlist-bypass.yaml 8.48 KB
ATR-2026-02668-vcs-ref-name-command-substitution.yaml 7.91 KB
ATR-2026-02669-query-pipeline-stage-in-identifier-parameter.yaml 6.66 KB
ATR-2026-02682-xml-entity-expansion-bomb.yaml 7.71 KB
ATR-2026-02707-crlf-header-injection-mail-tool-argument.yaml 6.66 KB
ATR-2026-02817-untrusted-content-dictates-tool-arguments.yaml 7.67 KB
ATR-2026-02864-non-canonical-ipv4-host-in-url-tool-argument.yaml 8.65 KB
ATR-2026-02865-read-only-utility-write-flag-in-command-argument.yaml 22.33 KB
ATR-2026-02868-ssrf-ipv6-transition-address-embedded-private-ipv4.yaml 7.64 KB
ATR-2026-02870-invisible-control-before-directive.yaml 13.47 KB

Free Open Source CDN for agent-threat-rules

Looking for a nice landing page for your package?