The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
The 7.0.14-101/201 kernel builds contain a fix for an unprivileged container / jail escape. This has not been assigned a CVE number yet, but a POC is in the wi…
Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938) Fixed a use-after-free bug in peer code. (#8921) Fixed build error when compiling with fmt 12.2.0. (#…
Update to latest upstream version Update to latest upstream version.
Security update resolving 22 CVEs across both caddy itself and its vendored libraries.
Update to 1.74.3
The 7.0.14-101/201 kernel builds contain a fix for an unprivileged container / jail escape. This has not been assigned a CVE number yet, but a POC is in the wi…
Update! Close Go standard library CVE bugs that are solved by a rebuild
Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938) Fixed a use-after-free bug in peer code. (#8921) Fixed build error when compiling with fmt 12.2.0. (#…
0.9.34 - security fix for CVE-2026-27145
Security update resolving 17 CVEs across both caddy itself and its vendored libraries.
Update to 1.74.3
Update bundled golang.org/x/crypto to 0.53.0
Update! Close Go standard library CVE bugs that are solved by a rebuild
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves 66 vulnerabilities can now be installed.
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
An update that solves five vulnerabilities can now be installed.