Coverage tagged "Open source".
Serial number: AV26-1049 Date: October 15, 2026 As of October 14, 2026, F5 is affected by vulnerabilities in the following products: NGINX Gateway Fabric Prior to 2.8.0 NGINX Ingress Controller Prior…
Posted by Tomasz Kaye on Oct 15 Follow-up: a CVE identifier has been assigned for this issue. CVE-2026-110734 — record: https://www.cve.org/CVERecord?id=CVE-2026-110734 The record is tagged…
Posted by Tomasz Kaye on Oct 15 Follow-up: a CVE identifier has been assigned for this issue. CVE-2026-110735 — record: https://www.cve.org/CVERecord?id=CVE-2026-110735 The record is tagged…
Posted by Tomasz Kaye on Oct 15 Follow-up: a CVE identifier has been assigned for this issue. CVE-2026-110736 — record: https://www.cve.org/CVERecord?id=CVE-2026-110736 The record is tagged…
VoidZero's tools such as Vite, Vitest, Oxc, and Rolldown — bundled in one toolchain as Vite+ — have made frontend development faster, but building full-stack applications requires more than just a…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One…
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence…
Posted by Salvatore Bonaccorso on Oct 14 Hi, FWIW, this is already https://www.cve.org/CVERecord?id=CVE-2026-108976 . Regards, Salvatore
arXiv:2610.19566v1 Announce Type: new Abstract: Autonomous drones are increasingly deployed in safety-critical tasks, yet their autopilot software can still contain subtle logic flaws that lead to…
arXiv:2610.19856v1 Announce Type: new Abstract: Typed decision models (TDMs) are increasingly used in applications such as request routing and model selection, making reliable decisions critical to…
arXiv:2610.19971v1 Announce Type: new Abstract: Automated jailbreak attacks rely on evaluation feedback to optimize adversarial prompts, but existing methods often lack fine-grained diagnostic…
IntroductionZscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial institutions. ARTEX is an open source agentic…
Posted by Willem Toorop on Oct 14 Several vulnerabilities were found in NSD. We released 4.15.3 as a security release on Wednesday 14 October including the relevant fixes. The overview of the…
Posted by Antoine du Hamel on Oct 14 Security release pre-alert: We will release new versions of Node.js 22, 24, and 26 release lines on or shortly after 2026-10-21 in order to address security…
Posted by Tomasz Kaye on Oct 14 Three memory-safety bugs in Godot 4's untrusted-file parsers were publicly disclosed on 2026-09-21 [1]. This thread covers the HDR loader bug. Affected versions: Godot…
Posted by Tomasz Kaye on Oct 14 Three memory-safety bugs in Godot 4's untrusted-file parsers were publicly disclosed on 2026-09-21 [1]. This thread covers the binary resource loader bug. Affected…
Serial number: AV26-1039 Date: October 14, 2026 As of October 13, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Bridge Prior to or equal to 16.0.7 Adobe Bridge (LTS)…
Posted by Maxime Coquelin on Oct 14 Multiple vulnerabilities were fixed in DPDK. Downstream stakeholders were warned in advance in order to coordinate the release of fixes and reduce the…
Cryptography rarely fails at the math - it fails at deployment. Why post-quantum migration and AI-scale risk make open-source stewardship a core control.
Posted by Tomasz Kaye on Oct 14 Three memory-safety bugs in Godot 4's untrusted-file parsers were publicly disclosed on 2026-09-21 [1]. This thread covers the OptimizedTranslation bug. Affected…
