References

• CVE-2025-53109/53110 (EscapeRoute): Cymulate Blog
• CVE-2025-54135 (CurXecute): Cato Networks
• CVE-2025-54136 (MCPoison): Checkpoint Research
• CVE-2026-24052 (SSRF): SentinelOne
• CVE-2025-66032 (Blocklist Bypasses): Flatt Security
• Snyk ToxicSkills (Supply Chain Audit): snyk.io/blog/toxicskills
• mcp-scan (Snyk): github.com/snyk/mcp-scan
• GitGuardian State of Secrets 2025: gitguardian.com
• Prompt Injection Research: Arxiv 2509.22040
• MCP Security Best Practices: modelcontextprotocol.io