Unverified50% confidenceFactExact time
NVD是美国NIST维护的权威漏洞库，收录经过CVSS评分的CVE记录
1
Sources
50%
Confidence
Long-term
Relevance
7/9/2026
First Seen
Sources
AI Coding Security: A CLI Tool Designed to Block Vulnerable Dependencies for Agents
hackernewshackernews7/1/2026
Related Claims
UnverifiedCVE is a global vulnerability identification system maintained by the U.S. MITRE Corporation and funded by the U.S. Department of Homeland Security; since its launch in 1999, it has catalogued more than 200,000 vulnerability entries.61% similarUnverified攻击载荷会扫描 .npmrc 中的 npm 认证令牌、AWS/GCP/Azure 云凭证、环境变量中的密钥以及 CI/CD 部署密钥61% similarVerifiedThe CVE (Common Vulnerabilities and Exposures) database is the world's most authoritative vulnerability numbering system, with new vulnerabilities being disclosed and recorded every day.60% similarUnverifiedNIST SP 800-207 标准明确将密钥分散管理列为零信任架构（ZTA）实施的重要技术控制措施之一60% similarUnverifiedAES is a symmetric encryption standard established by the National Institute of Standards and Technology (NIST) in 200159% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/382756API
curl https://kongchang.com/api/v1/knowledge/claims/382756MCP
get_claim(id=382756)