vulnerability disclosure

An Aeon Agent Found the Credential Leak in Google's Agents CLI, Fixed in 1.4.1

A malicious project template could have copied a developer's SSH key or cloud credentials into a new repository. An agent running on the Aeon framework found it, Google's vulnerability programme validated it, and the fix shipped on 24 August. It is one of 86 the same scanner has filed across 77 repositories.