AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
IDEs & agents · Cognition

Windsurf

AI IDE (formerly Codeium) with the Cascade agent.

2Advisories
0critical
2high
0medium
2025-08-21Latest
Timeline · advisories per quarter
12025 Q2
12025 Q3
Named in sources

Reported for Windsurf

01. highPrompt injectionWindsurf: prompt injection leaks developer secretsEmbrace The Red showed how prompt injection in files the Cascade agent reads could get Windsurf to leak secrets from the developer’s machine. Windsurf 2025-08-21
Same pattern

Also worth checking

01. highPrompt injectionMCP tool poisoning: hidden instructions in tool descriptionsAn MCP server can hide instructions inside a tool’s description. The model reads them, the user usually doesn’t, and the agent can be steered into reading files or sending data elsewhere. MCP SDKs & servers Cursor Claude Code +2 more 2025-04-01
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.