Improper Restriction of Rendered UI Layers or Frames Affecting ciguard package, versions [,0.8.2)

ciguard is a Static security auditor for CI/CD pipelines — now with a Model Context Protocol server (pip install 'ciguard[mcp]') exposing scan / scan_repo / explain_rule / diff_baseline / list_rules to Claude Desktop / Claude Code / Cursor. Plus .ciguardignore rationale-required suppression, baseline / delta reports, EOL-aware image checks, GitHub Actions CVE lookups across GitLab CI, GitHub Actions, and Jenkins Pipelines. Pre-commit hook + CIGUARD_MCP_DISABLED enterprise gate.

Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames due to missing HTTP security headers in the web interface. An attacker can compromise the integrity of the web application by exploiting the absence of headers such as Content-Security-Policy, X-Frame-Options, and Sub-Resource-Integrity, potentially enabling attacks like clickjacking or injection of malicious scripts when a user interacts with the web UI.

• GitHub Advisory
• GitHub Commit
• GitHub Release