Everything this site carried that day, newest first. Stories are kept for a month, and the widely covered ones for a year.
Vercel (blog + changelog)
Summary Impact Resolution Credit References Next.js Image Optimization v15.4.5 v14.2.31 A vulnerability affectinghas been addressed. It impacted versions prior toand, and involved a cache poisoning issue that caused sensitive image responses from API routes to be cached and subsequently served to…
Vercel (blog + changelog)
Summary Impact Resolution Credit References Next.js Image Optimization v15.4.5 v14.2.31 A vulnerability affectinghas been addressed. It impacted versions prior toand, and involved a scenario where attacker-controlled external image servers could serve crafted responses that result in arbitrary file…
Vercel (blog + changelog)
Summary Impact Resolution Workarounds Credit References Next.js Middleware v14.2.32 v15.4.7 Server-Side Request Forgery (SSRF) NextResponse.next() request A vulnerability affectinghas been addressed. It impacted versions prior toand, and involved arisk introduced by misconfigured usage of…
Framework blogs: Next.js releases / Svelte / Angular / Django / Rails / Laravel / Spring / React Native / Flutter
Belgian developer Bert de Swaef leads Vulpo, builds with Laravel, shares tutorials on YouTube, and speaks at Laracon and community meetups.
Huntress
Learn how a fake AnyDesk installer led to a unique MetaStealer attack, highlighting how threat actors evolve ClickFix techniques beyond the classic playbook to steal credentials and files.
EFF Deeplinks / noyb / Access Now
Data Subject Rights noyb has achieved a win against YouTube, the video platform provided by Google. After five and a half years, the Austrian data protection authority (DSB) has finally issued a decision siding with noyb – and ordering YouTube to comply with the complainant’s access request in…
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
Postgres is one of the most versatile databases out there. You can store vectors, declare row-level security rules, run background jobs, and more. Its simplicity and extensibility make it a workhorse for everything from side projects to large-scale systems. But that flexibility c...