Week of June 1–7, 2026
470 releases 85 breaking 25 security 12 tools featured
esbuild, Redis, LangChain, Keycloak patch high‑severity CVEs this week
This week's security updates target critical vulnerabilities across esbuild, Redis, LangChain, Claude‑Code, Graphify, Keycloak, Strapi, Portainer, Claude‑Flow, Mem0, Mastodon, Cloudreve and Budibase.
Editor's Picks
Open Source Identity and Access Management For Modern Applications and Services
CVE-2026-9801 causes DoS in LDAP federation via malformed PasswordPolicyControl
Read full release →Universal memory layer for AI Agents
Pinned dependency glob to ^10.5.0 remedying CVE-2025-64756
Read full release →Deploy multi-agent swarms with coordinated workflows.
Adds `AgentAuthorizationPropagator` module for action-layer security checks.
Read full release →The agent engineering platform
Patch CVE-2026-4539 by enforcing pygments>=2.20.0 across all packages.
Read full release →AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, OpenClaw, Factor...
Hardened hook script to prevent shell injection via proper quoting and diagnostic output.
Read full release →Category Pulse
Archive
Security & Auth tools · 12 releases +
-
Ghidra Ghidra_12.1.2_build maintenance
Routine maintenance and dependency updates.
-
teleport v18.8.3 mixed
Slack/Discord notifications, Azure discovery, Device Trust, JWT command, role option
-
PasswordPusher v2.7.2 maintenance
Routine maintenance and dependency updates.
-
Checkov 3.2.533 bugfix
Domain allow list fix + SCA improvements
-
aliasvault 0.29.4 bugfix
Fix Android app crashes when rendering certain favicons
Show low-signal releases (1)
-
cap [email protected] bugfix
Bug fixes and stability improvements.
AI & Machine Learning · 30 releases +
-
Fixes deploy backend selection
-
mflux v.0.18.0 feature
Adds ERNIE-Image and ERNIE-Image-Turbo model support with CLI entrypoints, LoRA inference/training, and mflux-save.
-
graphify v0.8.35 mixed
CodeBuddy + update fix
-
casibase v2.36.3 bugfix
Browser fallback for HTTP 403
-
stagehand [email protected] bugfix
API-key error clarification
Infrastructure · 15 releases +
-
arcane v2.0.1 bugfix
Fixes notification token decryption
-
kite v0.12.3 feature
Adds stricter cluster access checks for metrics, search, and system endpoints.
-
dockhand v1.0.32 bugfix
Clears Resources fields not persisted on container edit.
-
netbird v0.72.1 maintenance
Routine maintenance and dependency updates.
-
traefik v3.7.4 bugfix
Redis timeout + WebUI deps + GatewayAPI fix
Observability · 9 releases +
-
Checkmate v3.8.1 bugfix
Migration race condition fixed
-
Nezha v2.2.0 bugfix
Hyphenated auth metadata
-
oneuptime 10.5.31 bugfix
Fixes Twilio voice‑to‑text
-
dozzle v10.6.5 bugfix
font-src CSP addition
-
Server startup bug fix
Developer Tools · 8 releases +
-
pocketbase v0.39.2 maintenance
Routine maintenance and dependency updates.
-
chhoto-url 7.2.1 maintenance
Routine maintenance and dependency updates.
-
Dashboard UI improvements
-
electerm v3.15.32 bugfix
Bug fixes for icons, filenames, transfers
-
okteto 3.20.0 maintenance
Routine maintenance and dependency updates.
Show low-signal releases (1)
-
pastefy 7.2.6 unknown
CI/CD · 5 releases +
-
doco-cd v0.91.0 mixed
Submodule URL support + dependency bumps
-
dagger v0.21.4 bugfix
Fixes 1Password, tarball export, symlink dirs
-
dokploy v0.29.7 maintenance
Routine maintenance and dependency updates.
-
Tree builder fix
-
dokku v0.38.16 bugfix
Fix TouchFile + node match
Self-Hosted · 41 releases +
-
filebrowser v2.63.14 bugfix
Recursive check fix
-
portabase 1.18.0 mixed
Backup/restore logs + bugfixes + revert
-
mediacms v8.2.1 bugfix
Fixes SAML provider crash when mappings are empty.
-
neodb 0.15.3 bugfix
Threads integration fixes
-
bichon 1.5.1 bugfix
Preserve search fields
Data & Databases · 7 releases +
-
dolt v2.1.4 bugfix
Index changes + fulltext fix
-
surrealdb v3.1.3 maintenance
Routine maintenance and dependency updates.
-
yugabyte-db v2025.2.3.2 maintenance
Routine maintenance and dependency updates.
-
redis 8.6.4 bugfix
Critical bug fixes
-
vector v0.56.0 maintenance
Routine maintenance and dependency updates.
MCP Servers · 1 release +
-
relaticle v3.2.12 bugfix
Re-validate favicon fetcher redirect hops against SsrfGuard.
Get the weekly brief in your inbox. No spam, just software releases that matter.
Subscribe