Google fixes CVSS 10 in Gemini CLI; RCE in Cursor

Colleagues, note: in cybersecurity, Google patched a critical (CVSS 10) flaw in Gemini CLI; Cursor has bugs enabling code execution.

- Gemini CLI: headless/CI auto-trust of workspace allowed malicious .gemini/ configs to be loaded and commands executed. Affected versions: