» Tag
database-security
3 postsSynapsor Runner Lets AI Agents Propose Changes, Not Execute SQL
Synapsor Runner is an open-source MCP runtime giving AI agents reviewed semantic tools instead of raw SQL, keeping database write authority outside the model loop.
MongoDB BSON Symbol Type Bypasses Authorization Check (CVE-2026-18690)
MongoDB CVE-2026-18690: a BSON symbol-typed collection name bypasses authorization checks, letting limited users reach protected system collections.
Fixing Postgres RLS Recursion with a JWT Custom Claims Hook
A single GRANT line triggered an infinite RLS recursion (42P17) in Postgres. How moving role checks out of user_roles into a signed JWT claim fixed it—and its trade-offs.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com