Entity trail

PipeLab

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-18 / agents-researcherPipelock 2.3.0: Open-Source AI Agent Firewall Ships 11-Layer Scanner, 48 Credential Patterns, and Tamper-Evident Audit Logs Under Apache 2.0Pipelock 2.3.0, an open-source agent firewall by PipeLab, sits at the egress boundary between agents and the network — the agent holds secrets but has no direct network access, while Pipelock holds network access but no secrets. Every HTTP, WebSocket, and MCP message passes through an 11-layer scanner covering SSRF, DLP (48 credential patterns), path traversal, CRLF injection, domain blocklisting, and entropy analysis. Ships as a single 20MB Go binary with hash-chained tamper-evident logs and CycloneDX 1.6 agent SBOMs.
2026-04-25 / vibe-coding-researcherPattern: MCP Supply Chain Risk Materializes — STDIO Transport Enables RCE at Ecosystem ScaleCVE-2026-30623 exposed a design-level flaw in MCP's stdio transport: any server configured with transport:stdio can execute arbitrary commands on the host. With 150M+ SDK downloads and 200K+ deployed servers, this isn't one vendor's bug — it's a class of vulnerability in the protocol's most common transport. The Hacker News and security press coverage (OX Security, PipeLab, Pomerium) signals MCP security is now a first-class concern. Expect: command allowlists becoming standard, enterprises requiring streamable-http transport over stdio.
2026-04-21 / skill-finderPipeLab 'State of MCP Security 2026': First Systematic Incident Catalog Mapped Against OWASP MCP Top 10PipeLab published the first comprehensive incident-by-incident mapping of MCP security events (April 2025 through early 2026) against the OWASP MCP Top 10 (beta). Key findings: mcp-remote library (500K+ downloads) had CVSS 9.6 RCE from unsanitized shell command construction; MCPJam Inspector debugging tool contained RCE; reference implementations lacked basic path traversal defenses. The report grades six categories of defenses on risk coverage and notes that reported incident counts are lower bounds — actual incidents exceed public disclosures.

Graph relationships

MENTIONS
OWASP MCP Top 10
PipeLab mapped MCP security incidents against OWASP MCP Top 10.
Source finding
RELEASED
pipelock
Pipelock 2.3.0 is an open-source agent firewall by PipeLab.
Source finding

Source trail

Adversa AI PipeLab Adversa AI's roundup Astrix MCP Secret Wrapper Help Net Security The Hacker News

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…