Tech radar: week 11 of 2026
9–15 Mar 2026
In the week of 9–15 Mar 2026, 13 notable open-source releases shipped (including Ollama v0.18.0, OpenAI Python SDK v2.28.0, Cypress v15.12.0), CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Don't post generated/AI-edited comments. HN is for conversation between humans” (4229 points).
Releases worth knowing about
AI & machine learning
Ollama 0.18 includes improved performance for OpenClaw and Ollama’s cloud models, including the new Nemotron-3-Super model by NVIDIA designed for high
api: custom voices (50dc060)
release(langgraph): 1.1 (7102)
llama-index-core [0.14.16]mentions security
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-12-0
Web frameworks
Please refer to CHANGELOG.md for details.
[12.x] Fix division by zero error in repeatEvery() method by @amirhshokri in https://github.com/laravel/framework/pull/58987
Ignore proto path segments in parseBody({ dot: true }) to prevent potential prototype pollution when merged with unsafe patterns.mentions security
Languages & runtimes
\[ea87eea71a] - module: fix extensionless CJS files in "type": "module" packages (Matteo Collina) 62083mentions security
Mobile & desktop
Chromium 146.0.7680.65
Cloud & DevOps
1.14.7 (March 11, 2026)mentions security
Today, we are excited to share the 7.5.0 stable release 🎉mentions security
Welcome to the 1.111 release of Visual Studio Code, the first of our weekly Stable releases! This release further enhances the agent experience with a
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 6.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2025-26399ransomware use | SolarWinds Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2026-03-09 |
| CVE-2026-3910 | Google Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 2026-03-13 |
| CVE-2026-3909 | Google Skia | Google Skia Out-of-Bounds Write Vulnerability | 2026-03-13 |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 2026-03-09 |
| CVE-2025-68613 | n8n n8n | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 2026-03-11 |
| CVE-2021-22054 | Omnissa Workspace One UEM | Omnissa Workspace ONE Server-Side Request Forgery | 2026-03-09 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Don't post generated/AI-edited comments. HN is for conversation between humans4229 points · 1668 comments · 2026-03-11
- 02Tony Hoare has died2043 points · 268 comments · 2026-03-10
- 03Shall I implement it? No1563 points · 564 comments · 2026-03-12
- 04Can I run AI locally?1520 points · 353 comments · 2026-03-13
- 05Malus – Clean Room as a Service1433 points · 531 comments · 2026-03-12
- 06Meta Platforms: Lobbying, dark money, and the App Store Accountability Act1358 points · 1051 comments · 2026-03-13
- 071M context is now generally available for Opus 4.6 and Sonnet 4.61220 points · 519 comments · 2026-03-13
- 08Ireland shuts last coal plant, becomes 15th coal-free country in Europe (2025)1022 points · 666 comments · 2026-03-09
- 09“This is not the computer for you”1011 points · 380 comments · 2026-03-13
- 10Bill C-22, the Lawful Access Act: Dangerous backdoor surveillance risks remain1005 points · 335 comments · 2026-03-15
- 11The 49MB web page857 points · 375 comments · 2026-03-15
- 12Ageless Linux – Software for humans of indeterminate age837 points · 628 comments · 2026-03-14
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.