Latest AI and tech news

corgea.com • Oct 30 • by Corgea

LLMs · AI coding tools +10

+ = Sign in to like, bookmark, or love articles.

8E903

Trojanized `anthropic.claude-code` `2.1.313` in the Cursor marketplace planted an SSH backdoor on up to 5,000 developer machines

corgea.com • Oct 30 • by Corgea

Cybersecurity · Web development +8

+ = Sign in to like, bookmark, or love articles.

B7E0A

`node-forge` `1.4.2`, `joi` `18.3.1`, `@hapi/content` `6.0.3`, and `nuxt` `4.6.3` patch PKCS#12 MAC forgery, X.509 CA spoofing, and `/%2e/` route bypass

corgea.com • Oct 30 • by Corgea

Cybersecurity · Software engineering +8

+ = Sign in to like, bookmark, or love articles.

52241

`graphql-core` `3.3.1`, `joserfc` `1.7.6`, `pyasn1` `0.6.5`, `pypdf` `6.21.4`, Botan `3.13.0`, and Frappe `16.34.0` patch RCE, SSTI, and parser DoS

corgea.com • Oct 30 • by Corgea

Cybersecurity · linux +6

+ = Sign in to like, bookmark, or love articles.

8081A

`CVE-2026-98432`: Linux kernel IPv4 TCP options RCU use-after-free exposes Go `1.24+` default MPTCP listeners to remote root RCE

corgea.com • Oct 29 • by Corgea

Cybersecurity · Web development +9

+ = Sign in to like, bookmark, or love articles.

21886

Seroval `1.6.8` / `1.6.11`, Highcharts `13.1.0`, Vue I18n `11.4.14`, and GraphQL Tools `1.1.36` patch deserialization, prototype pollution, XSS, and WebSocket auth bleed

corgea.com • Oct 29 • by Corgea

Cybersecurity · zero-day +7

+ = Sign in to like, bookmark, or love articles.

AF006

ZDI publishes 7 zero-day RCE advisories in Ultralytics (`CVE-2026-118613` to `CVE-2026-118619`) alongside MONAI `1.6.1` `logging.conf` RCE (`CVE-2026-118683`)

corgea.com • Oct 29 • by Corgea

Cloud · Cybersecurity +8

+ = Sign in to like, bookmark, or love articles.

6D303

`oapi-codegen` `2.8.1`, `minimatch` `11.0.1`, `decode-uri-component` `0.5.1`, `@sigstore/oci` `0.7.2`, and `@sd-jwt/core` `0.20.0` patch Go code injection, glob/URI DoS, and credential leaks

corgea.com • Oct 29 • by Corgea

LLMs · MCP +12

+ = Sign in to like, bookmark, or love articles.

58053

PraisonAI `4.6.78`, Crawl4AI `0.9.5`, `@sylphx/pdf-reader-mcp` `3.0.1`, and `llama.cpp` `b11935` patch AST sandbox escape, Hugging Face pickle RCE, and unauthenticated MCP HTTP access

corgea.com • Oct 29 • by Corgea

Cybersecurity · Cloud +12

+ = Sign in to like, bookmark, or love articles.

F8BD7

`cert-manager` `1.20.3`, `aws-privateca-issuer` `1.10.1`, Kubeflow Pipelines `2.18.0`, ZITADEL `4.19.5`, and Keycloak `26.6.4` patch ClusterIssuer theft, artifact traversal, and auth bypass

corgea.com • Oct 28 • by Corgea

Cybersecurity · Languages +8

+ = Sign in to like, bookmark, or love articles.

DDACE

Elixir and Erlang security releases (`Bandit 1.14.0`, `hackney 4.9.0`, `Ash 3.37.2`): cross-tenant upsert takeover, pinned-CA `partial_chain` bypass, and nine HTTP/2 & WebSocket flaws

corgea.com • Oct 28 • by Corgea

Cybersecurity · Marketing & sales +8

+ = Sign in to like, bookmark, or love articles.

4A796

CISA adds Adobe Commerce and Magento PolyShell (`CVE-2026-48356`) to KEV as `deepveindrilling` CMS block loaders hit 953 stores

corgea.com • Oct 28 • by Corgea

Cybersecurity · audit +7

+ = Sign in to like, bookmark, or love articles.

11F92

Tailscale `v1.104.4` patches the Tailworm audit (`TS-2026-014` to `TS-2026-017`): root Unix-socket forwarding, `tailscaled` session OOM, `serve --tcp` LocalAPI takeover, and HTTP/2 capability bleed

corgea.com • Oct 28 • by Corgea

Cybersecurity · google +7

+ = Sign in to like, bookmark, or love articles.

D1C5B

Jackson `2.18.12` / `2.22.4` / `3.2.4`, Google Guava `33.7.2`, and Eclipse Vert.x `5.1.10` / `5.2.1` advisories: `PolymorphicTypeValidator` generic bypass, `Content-Xength` smuggling, and deserialization OOMs

corgea.com • Oct 28 • by Corgea

Cybersecurity · Data engineering +8

+ = Sign in to like, bookmark, or love articles.

16053

Apache Kafka `4.2.2`, `4.3.2`, and `4.4.0` patch 12 CVEs: SASL/OAUTHBEARER `ClientJwtValidator` fallback, broker file read via `IncrementalAlterConfigs`, Connect secret disclosure, and protocol / compression OOMs

corgea.com • Oct 28 • by Corgea

Cybersecurity · bypass +7

+ = Sign in to like, bookmark, or love articles.

7D3A8

Jenkins `2.588` and LTS `2.580.2` patch 14 CVEs: XStream `resolves-to` JEP-200 bypass, `getOrLoadNode` path traversal, `OldDataMonitor` admin takeover, and setup-wizard race RCE

corgea.com • Oct 27 • by Corgea

Cybersecurity · Languages +7

+ = Sign in to like, bookmark, or love articles.

87616

Go `klauspost/compress` `v1.20.2`, `go-jose` `v4.1.6`, and `rclone` `v1.75.2` patch zstd decoder panics, cubic RSA JWK DoS, and `selfupdate` PGP signature bypasses

corgea.com • Oct 27 • by Corgea

LLMs · AI coding tools +11

+ = Sign in to like, bookmark, or love articles.

FAF7F

Mistral Vibe `3.0.3`, Datadog `ddtrace` `4.15.6`, `rembg` `2.0.82`, Apache Airflow SSH `7.0.1`, and `systeminformation` `5.33.16` patch RCE, ReDoS, and local file disclosure

corgea.com • Oct 27 • by Corgea

Cybersecurity · github +7

+ = Sign in to like, bookmark, or love articles.

89667

Gheist plants 13,500 `ci-sync-*` GitHub Actions secret-dumping branches as Wiz maps 2026 `pull_request_target` bypasses

corgea.com • Oct 27 • by Corgea

Languages · Cybersecurity +8

+ = Sign in to like, bookmark, or love articles.

F96AB

RustSec advisories in `cargo-nextest` `0.9.150`, `rustpython-vm` `0.6.0`, `rustls-ffi` `0.15.7`, and `zstd-rs`: portable recording RCE, baked-in CI secrets, TLS SNI UAF, and 16 Zstandard flaws

corgea.com • Oct 27 • by Corgea

Web development · Languages +9

+ = Sign in to like, bookmark, or love articles.

BA61E

Symfony `8.1.9`, PhpSpreadsheet `5.10.0`, `snappy-java` `1.1.10.9`, Atlantis `0.47.1`, and `@fastify/express` `4.0.9` advisories: XXE, shell injection, JNI heap overflow, and route-auth bypass

corgea.com • Oct 27 • by Corgea

AI agents · Inference +11

+ = Sign in to like, bookmark, or love articles.

1988B

Agno `2.3.24`, LiteLLM `1.100.4`, Hydra `1.3.8`, vLLM `0.31.0`, and NVIDIA NeMo Agent Toolkit `1.9.0` patch RCE, salt-key admin escalation, and file read

corgea.com • Oct 27 • by Corgea

Cybersecurity · auth +7

+ = Sign in to like, bookmark, or love articles.

80BD6

Authlib `1.9.1` and Better Auth `1.7.7` advisories: empty-signature JWS bypass, PEM-prefixed HMAC confusion, and OAuth state Magic Link takeover

corgea.com • Oct 27 • by Corgea

briefing · 27-10-2026

+ = Sign in to like, bookmark, or love articles.

74528

Weekly Briefing - 27-10-2026

corgea.com • Oct 26 • by Corgea

MCP · Inference +12

+ = Sign in to like, bookmark, or love articles.

F893B

vLLM 0.32.0, OpenHands SDK 1.52.0, and Google Cloud MCP advisories: shared-memory `pickle.loads` RCE, unauthenticated Docker sandbox binds, and GCS bucket squatting

corgea.com • Oct 26 • by Corgea

Cybersecurity · Cloud +9

+ = Sign in to like, bookmark, or love articles.

C850D

Rust `zip` 9.0.0 and 9.0.5 and Cloudflare `pingora-core` 0.8.1 and 0.9.0 patch dual-header Zip Cloaking, symlink escapes, and HTTP/2 `:authority` / `Host` desync

corgea.com • Oct 26 • by Corgea

Cybersecurity · final +7

+ = Sign in to like, bookmark, or love articles.

D1F76

Netty `netty-tcnative` `2.0.84.Final` patches OpenSSL BIO ring-buffer heap overflow, session-ticket key rotation UAF, and modified UTF-8 SNI spoofing

corgea.com • Oct 26 • by Corgea

Web development · Software engineering +9

+ = Sign in to like, bookmark, or love articles.

0EC2E

`testmetest` and `@iobandamwer/*` npm worm: native-addon `.napi_cache` droppers and 42 armed GitHub repositories

corgea.com • Oct 25 • by Corgea

Web development · Software engineering +10

+ = Sign in to like, bookmark, or love articles.

13133

npm replaces 19 `appit-online` packages after `ionic-insta-api-wrapper` and `insta-api-wrapper` exfiltrate Instagram credentials and run `/v2/insta/verify` follow/like commands

corgea.com • Oct 25 • by Corgea

AI agents · MLOps +11

+ = Sign in to like, bookmark, or love articles.

334BE

Strands Agents SDK, LangGraph, FastMCP, and MLflow advisories: A2A cross-session leaks, dot-joined namespace traversal, post-transform auth bypass, and unauthenticated scorer SSRF

corgea.com • Oct 25 • by Corgea

Cybersecurity · six +7

+ = Sign in to like, bookmark, or love articles.

9E9E4

Twisted `26.10.0rc1` patches six pre-auth XML, IRC, Telnet, HTTP, IMAP4, and DNS vulnerabilities (`CVE-2026-115775`, `CVE-2026-115776`, `CVE-2026-115778`, `CVE-2026-115877`)

corgea.com • Oct 25 • by Corgea

Cybersecurity · path +7

+ = Sign in to like, bookmark, or love articles.

919C9

Postiz `2.25.2` and `2.25.3` advisories: unrestricted `@DashboardFunction` calls, media path traversal, and `extension-refresh` JWT signing (`CVE-2026-115931`, `CVE-2026-115932`, `CVE-2026-115933`)

corgea.com • Oct 24 • by Corgea

Cybersecurity · online +7

+ = Sign in to like, bookmark, or love articles.

E89A9

CVE-2026-110447: CISA KEV flags Collabora Online `richdocumentscode` Nextcloud `proxy.php` command injection as `26.4.502` ships

corgea.com • Oct 24 • by Corgea

Software engineering · Cybersecurity +9

+ = Sign in to like, bookmark, or love articles.

7C15B

Laravel 12.68.0 / 13.29.0 and Livewire 4.4.8 advisories: non-string TokenGuard auth bypass, JSON:API `include` table truncation, and `#[Authorize]` parameter key confusion

corgea.com • Oct 24 • by Corgea

Web development · Cybersecurity +8

+ = Sign in to like, bookmark, or love articles.

88028

Happy DOM 21.0.4, Undici 8.12.2 / 7.30.1 / 6.29.1, body-parser 2.4.0, and multer 2.5.0 advisories: ESM import-alias host RCE, SRI bypass, and single-request Node.js crashes

corgea.com • Oct 24 • by Corgea

Cybersecurity · Web development +9

+ = Sign in to like, bookmark, or love articles.

C29D9

Wasmtime 49.0.4, 48.0.7, 43.0.0, and 36.0.19 patch two critical Cranelift sandbox escapes and WASI HTTP header framing bugs

corgea.com • Oct 24 • by Corgea

Web development · Cybersecurity +8

+ = Sign in to like, bookmark, or love articles.

B90F1

Go Echo `v4.16.1` and `v5.4.1` advisories: rejected WebSocket upgrade route-auth bypass, `X-Real-IP` spoofing, and unbounded `Decompress` / `BodyDump` allocation

corgea.com • Oct 24 • by Corgea

Languages · Cybersecurity +7

+ = Sign in to like, bookmark, or love articles.

C6EA2

OVHcloud CLI `v0.11.0` to `v0.15.0` GitHub release asset swap: dirty Go builds, an `envchecker` stealer, and a GlassWorm dead drop

corgea.com • Oct 23 • by Corgea

MCP · Web development +10

+ = Sign in to like, bookmark, or love articles.

A684A

MCP TypeScript SDK advisories: cross-client response leaks, un-scoped tasks, and two fixes that stay off until you edit code

corgea.com • Oct 23 • by Corgea

Cybersecurity · Web development +8

+ = Sign in to like, bookmark, or love articles.

794EE

CVE-2026-114125 and CVE-2026-114126: Storybook dev server preview and LAN WebSocket channels allow code injection into story files

corgea.com • Oct 23 • by Corgea

Data science · Software engineering +9

+ = Sign in to like, bookmark, or love articles.

6DF4D

GitPython, Jupyter Server, and nbconvert advisories: post-clone `.git/hooks` RCE, gateway kernel auth bypass, and notebook export traversal

corgea.com • Oct 23 • by Corgea

Cybersecurity · Languages +9

+ = Sign in to like, bookmark, or love articles.

3C801

Ruby 4.0.9, 3.4.12, and 3.3.13 patch three Onigmo regex compiler bugs behind four GitLab RCE CVEs

corgea.com • Oct 23 • by Corgea

Software engineering · Cybersecurity +8

+ = Sign in to like, bookmark, or love articles.

BC751

Django REST framework, PyJWT, and Black advisories: bz2_codec upload expansion, silent TokenProxy.delete(), empty oct JWK forgery, and CI required-version injection