Week of May 25–31, 2026
443 releases 75 breaking 24 security 7 tools featured
Critical patches hit AutoGPT, uptime-kuma, Prometheus, Wekan and nginx-proxy-manager this week.
This week's security landscape features critical patches across diverse tools: AutoGPT, uptime-kuma, Prometheus, ragflow, Hoppscotch, qBittorrent, Wekan, nginx-proxy-manager, Graphify, Claude-flow, changedetection.io, DBeaver address RCE, SSRF, secret exposure and XML injection risks.
Editor's Picks
Security upgrade from version 15.4.11 to 15.5.18 mitigates critical vulnerabilities.
A fancy self-hosted monitoring tool
Patches Remote Code Execution vulnerability from upstream dependency.
Read full release →The Prometheus monitoring system and time series database.
Fixes plaintext secret exposure via `/‑/config` endpoint.
Read full release →Prevents session user_id spoofing via request body manipulation.
Prevents mass‑assignment risks during onboarding to block unauthorized writes.
Category Pulse
Archive
Security & Auth tools · 8 releases +
-
Maltrail 1.5 maintenance
Routine maintenance and dependency updates.
-
voidauth v1.13.0 feature
Adds LDAP server functionality.
-
infisical v0.160.9 bugfix
Vault namespace listing fix
-
Ghidra Ghidra_12.1.1_build maintenance
Routine maintenance and dependency updates.
-
logto v1.40.1 bugfix
@logto/[email protected]
Show low-signal releases (1)
-
Zircolite v3.7.5 bugfix
Performance improvements
AI & Machine Learning · 37 releases +
-
droidrun v0.6.1 bugfix
Anthropic OAuth fixes
-
mux v0.26.1 bugfix
Layout flash fix + plan mode refinement
-
AionUi v2.1.8 maintenance
Diagnostic improvements
-
CopilotKit v1.59.2 maintenance
Routine maintenance and dependency updates.
-
OpenCLI v1.8.1 security
Write yt-dlp cookie file with 0600 owner‑only permissions.
Show low-signal releases (2)
-
graphify v0.8.25 bugfix
Bug fixes
-
Toad v0.6.20 unknown
Infrastructure · 13 releases +
-
seaweedfs 4.30 mixed
S3 security + health probes + module fixes
-
panel v1.12.4 bugfix
Properly waits for lock before proceeding.
-
dockhand v1.0.31 bugfix
Fixes 502 error
-
microsandbox v0.5.3 mixed
Sandbox limit + CLI commands + Network flush
-
zoraxy v3.3.3-rc4 dependency
Bump docker/build-push-action from 7.1.0 to 7.2.0
Show low-signal releases (1)
-
Salt v3008.0 unknown
Observability · 12 releases +
-
Nezha v2.1.4 maintenance
Routine maintenance and dependency updates.
-
uptime-kuma 2.4.0 security
Patches Remote Code Execution vulnerability from upstream dependency.
-
dozzle v10.6.3 bugfix
CPU normalization + clipboard fix + UI overflow
-
opik 2.0.52 mixed
v2 UI, e2e tiers, dataset replay
-
matomo 5.10.1 maintenance
Routine maintenance and dependency updates.
Developer Tools · 6 releases +
-
budibase 3.39.5 bugfix
Backup export & manifest recovery
-
Nhost [email protected] bugfix
Content-Type handling for GraphQL
-
electerm v3.11.12 bugfix
SFTP upload fix for Windows
-
wakapi 2.17.4 maintenance
Routine maintenance and dependency updates.
-
chhoto-url 7.1.5 bugfix
Frontend crash fix
CI/CD · 9 releases +
-
dokku v0.38.15 bugfix
Scheduler‑k3s map persistence fix
-
dokploy v0.29.6 feature
Adds self‑hosted enterprise restrictions: remote‑servers‑only and enforce‑sso.
-
doco-cd v0.89.2 mixed
Deployment concurrency + dependency updates
-
dagger v0.21.3 bugfix
1password regression fix
-
Fixes plan invalidation
Self-Hosted · 36 releases +
-
DockSTARTer v1.20260531.2 bugfix
Config apply order
-
ezbookkeeping v1.5.1 bugfix
Popover closure fix
-
tunarr v1.3.4 bugfix
Allow retries when cleaning up stream directories.
-
wekan v9.34 bugfix
Admin panel attachment move fix
-
bichon 1.4.3 bugfix
IMAP fix + email dedup
Show low-signal releases (1)
-
Ombi v4.53.10 unknown
Data & Databases · 4 releases +
-
dolt v2.1.0 bugfix
ALTER TABLE fix for TEXT BLOB
-
server mariadb-12.3.2 maintenance
Routine maintenance and dependency updates.
-
meilisearch v1.45.1 bugfix
Autobatch deletion revert
-
countly-server 25.03.45 bugfix
Accept numeric color in saveNote schema for note creation/edit validation
MCP Servers · 1 release +
-
relaticle v3.2.11 maintenance
Routine maintenance and dependency updates.
Get the weekly brief in your inbox. No spam, just software releases that matter.
Subscribe