← Cursor security brief

Cursor change history

Every security, compliance, and legal-policy change Swanum has detected for Cursor — new CVEs, certification changes, and terms-of-service updates. Each entry is generated deterministically from the underlying evidence and re-checked continuously.

Jun 30, 2026
minor doc unavailable
The Master Service Agreement's previous URL stopped responding and we could not locate a current version automatically. We're searching for its new location; this is flagged for manual review.
Jun 28, 2026
notice cve
2 new CVEs (published from 2025-10-03): CVE-2025-61591, CVE-2025-61592. 2 of these have no vendor fix listed yet (CVE-2025-61591, CVE-2025-61592).
Jun 27, 2026
notice cve
21 new CVEs (published from 2025-08-01): CVE-2025-54130, CVE-2025-54131, CVE-2025-54132, CVE-2025-54133, CVE-2025-54135, CVE-2025-54136 (+15 more). 2 of these have no vendor fix listed yet (CVE-2025-61591, CVE-2025-61592).
Jun 22, 2026
notice cve
19 new CVEs (published from 2025-08-01): CVE-2025-54130, CVE-2025-54131, CVE-2025-54132, CVE-2025-54133, CVE-2025-54135, CVE-2025-54136 (+13 more). 2 of these have no vendor fix listed yet (CVE-2025-61591, CVE-2025-61592).
Jun 17, 2026
minor tos clause
The Terms of Service was re-published with only formatting changes — no clause change.
Jun 16, 2026
minor tos clause
The Privacy Policy was re-published with only formatting changes — no clause change.