Buscar…⌘K

Feed

Releases y novedades de tu stack, automático.

pragmaticengineer.com

AI SRE: what is it, how could it change on-call – and does it work?

typescriptadvisory

github-advisories

[MEDIUM] qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

typescriptadvisory

github-advisories

[HIGH] undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

typescriptadvisory

github-advisories

[LOW] @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

typescriptadvisory

github-advisories

[HIGH] better-auth: OAuth Proxy lets an attacker sign in as another user

typescriptadvisory

github-advisories

[CRITICAL] better-auth: OAuth state can be used as a Magic Link to sign in as another user

typescriptadvisory

github-advisories

[MEDIUM] Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service

typescriptadvisory

github-advisories

[MEDIUM] Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

typescriptadvisory

github-advisories

[MEDIUM] Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

devblogs.microsoft.com

Blazor Welcomes Open-Source Contributions from Infragistics

typescriptadvisory

github-advisories

[HIGH] better-auth: Device login approval does not show the requesting client or permissions

typescriptadvisory

github-advisories

[MEDIUM] Satori-generated SVG has improper escaping

typescriptadvisory

github-advisories

[MEDIUM] Ghost: Authorization Bypass in Comment Like Feature

typescriptadvisory

github-advisories

[LOW] dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

postgresarticle

planet.postgresql.org

Christophe Pettus: All Your GUCs in a Row: restart_after_crash

ia-orquestacionarticle

simonwillison.net

GPT-6.1 Terra

postgresarticle

planet.postgresql.org

Devrim GÜNDÜZ: The PostgreSQL RPM repository needs a lot less EPEL now

ia-orquestacionarticle

simonwillison.net

Quoting Jason Koebler

ia-orquestacionarticle

simonwillison.net

webframe: evaluated as a scraper and a sandbox

azure.microsoft.com

Scale reservoir uncertainty analysis with agile reservoir modeling

AWS Weekly Roundup: Amazon Polly Generative engine, TorchNeuron for Trainium, and more (October 26, 2026)

postgresarticle

planet.postgresql.org

Karen Jex: Fostering Inclusivity with the PostgreSQL Europe Diversity Committee

postgresarticle

planet.postgresql.org

semab tariq: Your backups are green. That does not mean you can restore.

postgresarticle

planet.postgresql.org

Christophe Pettus: All Your GUCs in a Row: reserved_connections

Our Response To The eMudhra Key Disclosure Incident

devblogs.microsoft.com

.NET October 2026 Out-of-Band Security Updates

ia-orquestacionarticle

simonwillison.net

Seam Cutter

postgresarticle

planet.postgresql.org

Vadim Yatsenko: Speech at PGDay Israel 2026：Durability, Consistency, and Performance

postgresarticle

planet.postgresql.org

Vadim Yatsenko: DataMax: A Dedicated WAL Log-Store Node for Near-Synchronous Durability

postgresarticle

planet.postgresql.org

Vadim Yatsenko: Commit Sequence Number (CSN) MVCC: Lock-Free Snapshot Acquisition

postgresarticle

planet.postgresql.org

Christophe Pettus: All Your GUCs in a Row: remove_temp_files_after_crash

postgresarticle

planet.postgresql.org

Gabriele Bartolini: CNPG Recipe 28 - Generated and rotating PostgreSQL user passwords in CloudNativePG 1.31

postgresarticle

planet.postgresql.org

Cornelia Biacsics: Contributions for week 41 & 42

ia-orquestacionarticle

simonwillison.net

battledrones v14: Compass Rose, a four player map

postgresarticle

planet.postgresql.org

Christophe Pettus: All Your GUCs in a Row: recursive_worktable_factor

postgresarticle

planet.postgresql.org

Vadim Yatsenko: PolarFS: Disk-Paxos RW Leases That Keep Shared Storage Out of Split-Brain

typescriptadvisory

github-advisories

[HIGH] MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint

typescriptadvisory

github-advisories

[HIGH] undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

typescriptadvisory

github-advisories

[MEDIUM] undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

typescriptadvisory

github-advisories

[MEDIUM] undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

typescriptadvisory

github-advisories

[LOW] Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body

typescriptadvisory

github-advisories

[HIGH] multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

typescriptadvisory

github-advisories

[HIGH] Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution

typescriptadvisory

github-advisories

[LOW] Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root

typescriptadvisory

github-advisories

[MEDIUM] Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient

typescriptadvisory

github-advisories

[MEDIUM] Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient

typescriptadvisory

github-advisories

[MEDIUM] Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

typescriptadvisory

github-advisories

[MEDIUM] fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

typescriptadvisory

github-advisories

[LOW] fast-uri vulnerable to improper path equivalence in relative reference normalization

typescriptadvisory

github-advisories

[MEDIUM] fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization