Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

A workaround is to put the module import in a loop, this works and it succeeds on the second try. Another workaround as suggested in issue #20 is to pass the JSRuntime to the BrowserConsole sink.

There is a small chance to get into this race condition. We had it yesterday. Instead of getting cancellation on JS invoke task, IpcReceiver failed to process EndJSInvoke message and we got an ...