Spring AI Vector Store RCE: Patch Before June 30 EOL
CVE-2026-22738 gives unauthenticated attackers RCE on Spring AI apps via SpEL injection in SimpleVectorStore. Spring Boot 3.5 EOL hits June 30. Here are ...
Proto6: Six protobuf.js Vulnerabilities Expose Node.js to RCE
Cyera Research disclosed 6 CVEs in protobuf.js (Proto6) on June 10, 2026. Two achieve RCE ...
Terraform 1.15: Dynamic Module Sources Are Here
Terraform 1.15 ships dynamic module sources with the new const variable. Here's what changed, how ...
GitHub Bot PRs Now Trigger CI — With One Required Approval
GitHub now lets github-actions[bot]-created PRs trigger CI/CD workflows after maintainer approval. Here is what changed ...
Python Free-Threading Is Official: What PEP 779 Means for Your Code
Python 3.14.6 landed on June 10. Buried in the changelog is the announcement developers have ...
Apple Container 1.0: Free Docker Alternative Hits Mac Now
Apple released apple/container 1.0 on June 9 — a free, open-source Docker alternative for Mac that gives each container its own VM. Here's ...
Linux 7.1 Is Here: NTFS Resurrection and the AI Crisis
Linux 7.1 landed June 14 with a new NTFS driver delivering 110% faster writes. But ...
CVE-2026-20253: Patch Splunk Enterprise Before This RCE Hits
Splunk Enterprise 10.x has a CVSS 9.8 pre-auth RCE in the PostgreSQL Sidecar Service. Check ...
VS Code 1.124: Autopilot Is Now On by Default
VS Code 1.124 shipped June 10 and flipped one switch that affects every developer who ...
Node.js June 17 Security Patch: HIGH Severity Hits 22.x, 24.x, 26.x
Node.js releases a HIGH severity security patch on June 17 for all active lines (22.x, ...