Skip to content

MEDUSA v2026.5.0 — 9,600+ Rules, 200 CVEs, Windows PATH Fix

Choose a tag to compare

@rosschurchill rosschurchill released this 03 Apr 06:13
· 69 commits to main since this release

What's New in v2026.5.0

🤖 9,600+ AI Security Patterns

Up from 7,300 in v2026.4.0 — comprehensive coverage for AI/ML, agents, MCP servers, RAG pipelines, and prompt injection.

🚨 200 CVEs (CVEMiner v2.0)

Expanded CVE database covering AI coding editors, MCP servers, and supply chain attacks. Up from 133.

🪟 Windows PATH Auto-Fix

Automatically detects and repairs missing PATH entries on Windows install — no more manual $env:PATH edits.

🔧 79 Scanner Categories Wired

Full RULE_CATEGORIES wiring across all 79 scanners for precise finding attribution in reports and dashboards.

🐛 Stability Fixes

  • resolve(strict=False) — prevents FileNotFoundError when CWD does not exist
  • Non-interactive CI mode — auto-continues past tool-check prompt in subprocesses
  • Target path validation — clean error message instead of cryptic traceback
  • Removed accidentally tracked MCP test fixtures from public repo

🎬 Live Demo

Real scan of a real codebase — see MEDUSA in action in the README.


Install / Upgrade

pip install medusa-security==2026.5.0
# or
pip install --upgrade medusa-security

Full Changelog

See commits since v2026.4.0