Developer Tools & Supply Chain
AWS Kinesis Producer Library 1.0.8 Fixes Credential ExposureNew!!
AWS Kinesis Producer Library 1.0.8 fixes credential exposure. Upgrade producers, rotate exposed credentials, restrict logs, validate, and retain evidence.
JetBrains Updates Address Compromised Certificate TrustNew!!
JetBrains updates address compromised certificate trust in IDEs, Toolbox, JCEF and jetbrainsd. Patch each layer, validate trust, and retain evidence.
Qt 6.8.10, 6.11.3, and 6.12.1 Fix CBOR Conversion FlawNew!!
Qt fixed crafted-CBOR conversion crashes and possible memory-safety impact in 6.8.10, 6.11.3, and 6.12.1. Rebuild apps, test, and retain evidence.
Elixir 1.18.6, 1.19.7, and 1.20.5 Fix Three FlawsNew!!
Elixir 1.18.6, 1.19.7, and 1.20.5 fix parser denial of service and a local Mix flaw. Update runtimes and build hosts, test, and retain evidence.
nvm 0.40.6 Fixes Version-String Command Injection
nvm 0.40.6 fixes version-string command injection, including auto-switch hook exposure. Update developer systems, inspect hooks, and retain evidence.
Apple Xcode 27.2 Fixes File and Sensitive-Data Access
Apple Xcode 27.2 fixes arbitrary-file and sensitive-data access. Inventory developer Macs and build hosts, update, validate tooling, and retain evidence.
AWS SDK for pandas 3.16.1 Fixes Athena Result-Bucket Ownership Flaw
AWS SDK for pandas 3.16.1 verifies Athena result-bucket ownership. Upgrade, find default locations, validate ownership and data, and retain evidence.
Progress Telerik Document Processing 2026.3.1027 Fixes Six Flaws
Telerik Document Processing 2026.3.1027 fixes six high-severity flaws. Find exposed document paths, upgrade, validate processing, and retain evidence.
AWS CDK 2.274.0 Fixes Redshift Custom-Resource SQL Injection
AWS CDK 2.274.0 fixes Redshift custom-resource SQL injection. Upgrade packages, review PUBLIC grants, validate deployments, and retain evidence.
Oracle Issues Emergency Java Trust-Store Update for eMudhra Risk
Oracle issued an emergency Java trust-store alert. Inventory listed runtimes, install the latest patch or mitigation, validate, and retain evidence.