Patches & Updates

1+ week, 2+ day ago   (331+ words) On October 14 2026 we will ship curl 8.23.0. The next iteration in the never-ending series of version bumps from the curl project. We always think of the next release as the best version we ever did – and this time is no exception....

2+ day, 12+ hour ago   (395+ words) After the supply chain incident in March, we brought in Veria Labs to audit the LiteLLM proxy and fixed a number of vulnerability reports from independent researchers. All issues below are fixed in v1.83.0. If you are affected, particularly if you…...

2+ day, 21+ hour ago   (512+ words) IBM and Red Hat said on October 6 that Lightwell, the open-source security program the two companies funded with $5 billion in May, has found, fixed, and backported patches for more than 400 previously unknown vulnerabilities in widely used Java libraries. The same…...

5+ day, 2+ hour ago   (260+ words) Agentic AI orchestrator runs continuously across every stage. AI agents and human experts, scaling with your attack surface. Time-bound offensive testing by the world's top security researchers. AI code security with human expert validation built in. Agentic analysis reasons across…...

1+ week, 21+ hour ago   (385+ words) Elementor shipped the fix for CVE-2026-32475 on August 19. Attackers started exploiting it the same day, and Wordfence blocked more than 190,000 attempts in the first five days. If your site ran Elementor Pro 4.2.1 or earlier during that window, updating is the…...

1+ week, 3+ day ago   (476+ words) CHICAGO — Trust is a critical part of the creation, distribution and consumption of software. As systems become more complex and modular, this becomes increasingly challenging. Teams have to ensure they have the right processes in place in order to ensure…...

1+ week, 1+ day ago   (361+ words) By: Mike Vizard on October 7, 2026 An analysis of the backlog of vulnerabilities published today by HackerOne finds that while the rate at which issues are being resolved has increased 54% in the past year there has also been a 131% over the…...

1+ week, 2+ day ago   (224+ words) X.Org fixed 12 security flaws in the X server and Xwayland, with the repairs shipping in xorg-server 21.1.25 and xwayland-24.1.14. Nine of the flaws can lead to arbitrary code execution. The other three can crash the server or disclose information. Ten of…...

1+ week, 3+ day ago   (783+ words) By: Mitchell Johnson on October 6, 2026 For years, the software industry’s answer to vulnerability overload has been straightforward: Find issues earlier, prioritize them better and fix them faster. Developers have always made trade-offs when selecting dependencies, weighing functionality, compatibility, maintenance, security…...

1+ week, 6+ day ago   (1117+ words) WordPress 7.1.2 was released on 22 September 2026 to fix a remote file inclusion flaw tracked as CVE-2026-87902. The interesting part of this event is not the vulnerability class. It is the timeline. Attack attempts were observed within hours of the patch, and…...