Cursor AI Editor Patched Two Critical 9.8-Severity Sandbox Escape Bugs

·1 views

Security researchers at Cato AI Labs discovered two critical vulnerabilities, collectively named DuneSlide, in the Cursor AI code editor's sandbox system, both rated 9.8 out of 10 on the CVSS scale. The flaws allowed a zero-click sandbox escape, meaning attackers could plant hidden instructions in content the AI agent reads — such as web pages or MCP tool results — without any user interaction. Both bugs exploited the same underlying approach: tricking the agent into writing a file outside the project directory, then using that write to disable the sandbox entirely for subsequent commands. Cursor released patches in version 3.0 on April 2, roughly two and a half months before the public disclosure on July 1, following standard coordinated disclosure practices. The vulnerabilities affected all Cursor versions prior to 3.0, raising significant concern given that the tool is reportedly used by more than half of Fortune 500 companies.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

BlackBull framework now runs HTTP and MQTT 5 in a single Python file

The BlackBull Python web framework has added native MQTT 5 broker support, allowing developers to run HTTP and MQTT protocols together in one application file with a single pip install. The MQTTExtension can be attached to a BlackBull app, binding an MQTT broker to port 1883 while the HTTP server runs on port 8000. Because both protocols share the same process, data can be exchanged through plain in-memory variables without needing Redis, message queues, or any broker sidecar. The framework also auto-generates AsyncAPI documentation for MQTT routes, mirroring its existing OpenAPI 3.1 support for HTTP endpoints. Developers can subscribe to parameterised MQTT topics using the same decorator-based syntax used for HTTP routes, keeping the codebase consistent across protocols.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Spring Boot PostgreSQL COPY Protocol Eliminates Batch Size Tuning for Bulk Inserts

A software engineer building a real-time interbank settlement pipeline faced unpredictable daily transaction volumes, making it risky to hardcode a JDBC batch size for bulk database inserts. Standard JDBC batch inserts in Spring Boot require selecting a fixed batch size, which can cause too many database roundtrips if too small or memory and timeout issues if too large. To avoid this tradeoff, the engineer turned to PostgreSQL's COPY protocol, which streams an entire dataset directly into a table in a single operation, bypassing per-row parsing and execution overhead. In Spring Boot, this is implemented via PostgreSQL's CopyManager API, which requires unwrapping the HikariCP connection proxy to access the native driver. The approach removes the batch size as an application-level tuning variable, letting PostgreSQL and network capacity determine throughput instead.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Typed: Open-Source Python Clients Aim to Fix Crypto Exchange API Inconsistencies

A team of proprietary traders has released Typed, a suite of async, fully-typed Python clients designed to address common inconsistencies in crypto exchange APIs. The library provides one package per exchange venue with a consistent interface, validating all responses at the boundary before they reach user code. Four clients are currently live on PyPI under the typed-* namespace, covering Hyperliquid, Alchemy, MEXC, and dYdX, with more exchanges in active development. The developers say the tooling emerged from their own live trading needs, which they argue holds the project to a higher maintenance standard than typical open-source software. The packages are published under the GPLv3 license, and the team is welcoming community contributions and feedback via GitHub.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Reflects on AI's Growing Role and What It Means for Coding Skills

A developer writing on DEV Community describes relying heavily on AI-generated code since May 2025, mostly reviewing output rather than writing from scratch. While acknowledging AI's significant improvement over early tools, the author admits feeling conflicted about integrating generated code into their personal workflow. A deeper concern has emerged: the fear of becoming professionally redundant as AI handles more technical tasks. The author suggests that the future developer role may shift toward asking better questions, making sound judgments, and catching errors in AI output rather than writing every line manually. Despite this pragmatic view, they express nostalgia for the hands-on problem-solving experiences that defined traditional software development.

0 comments Read more at DEV Community