跳到主内容
@wquguru
精选85Gemini CLI(GitHub Releases)AI 编程与模型

Gemini CLI v0.53.0:修复A2A RCE与ReAct循环

Release v0.53.0

原文
发到 X
推荐理由

Gemini CLI 用户请注意:此版本修复了 A2A 服务器中的 RCE 漏洞,并缓解了 ReAct 循环与提示注入问题,建议尽快升级以保障安全。

What's Changed

  • fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request by @luisfelipe-alt in #28407
  • feat(caretaker-triage): implement LLM triage orchestrator and container build by @chadd28 in #28345
  • refactor(cli): align macOS permissive Seatbelt profiles with deny-default model by @ompatel-aiml in #28424
  • fix(core): mitigate infinite ReAct loops and prompt injection loops by @amelidev in #28429
  • fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by @luisfelipe-alt in #28470
  • fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in #28472
  • feat(evals): add eval coverage report command by @ved015 in #28169

Full Changelog: v0.52.0...v0.53.0

更进一步:量化金融体系

看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力

进入量化体系 →

相似阅读

另一事件,读法相近