Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to v1.36.0 Full changelog: https://github.com/AzureAD/microsoft-authentication-library-for- python/releases/tag/1.36.0
update to 2.31.4 fixes nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860) https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj
Update to 0.6.26, fixing several CVEs https://github.com/libexif/libexif/releases/tag/v0.6.26
update to 2.31.4 fixes nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860): https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj
Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c Ex…
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but noted that no user da…
An update to patch a security vulnerability. Advisory: https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHS A-f78v-p5hx-m7hh Changelog * Mon …
Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability.
Update to 0.37.2 Fixes silent TLS certificate verification bypass on HTTPS Redirect via proxy (CVE-2026-32627, rhbz#2448105) Source: https://github.com/yhirose…
Update to version 1.7.1. Includes the fix for CVE-2026-26076: https://github.com/pendulum-project/ntpd- rs/security/advisories/GHSA-c7j7-rmvr-fjmv Release note…
This is the March 2026 release of .NET 8 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.25/8.0.125.md Runtime: https://git…
This is the March 2026 release of .NET 9. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.14/9.0.115.md Runtime: https://gi…
This is the March 2026 release of .NET 10. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.4/10.0.104.md Runtime: https:/…
This is the March 2026 release of .NET 10. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.4/10.0.104.md Runtime: https:/…
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's clo…
Rename from golang-github-prometheus and upgrade to 3.10.0
Cybersecurity researchers have disclosed details of a malicious Go module that's designed to harvest passwords, create persistent access via SSH, and deliver a…
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
https://github.com/aio-libs/aiohttp/blob/v3.13.3/CHANGES.rst
Update to version 1.9.2. Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.2
Update to 0.30.1 Denial of service (DOS) using zip bomb (CVE-2026-22776) CRLF injection in http headers (CVE-2026-21428) Untrusted HTTP Header Handling: X-Forw…
Update to Upstream version 0.1.2 - https://github.com/complytime/complyctl/releases/tag/v0.1.2
