Tech radar: week 12 of 2026
16–22 Mar 2026
In the week of 16–22 Mar 2026, 9 notable open-source releases shipped (including vLLM v0.18.0, n8n [email protected], Next.js v16.2.0), CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Astral to Join OpenAI” (1489 points).
Releases worth knowing about
AI & machine learning
- Degraded accuracy when serving Qwen3.5 with FP8 KV cache on B200 (37618)mentions security
add support for filesystem memory tools (1247) (235d218)
Web Search and Fetch in OpenClawmentions security
api: 5.4 nano and mini model slugs (3b45666)
Automation
1.123.26 (2026-03-19)mentions security
Web frameworks
Check out our Next v16.2 Blog Post to learn more about this release.mentions security
[12.x] Correct truncate exceptions at by @bretto36 in https://github.com/laravel/framework/pull/59239
- feat: allow css, runes, customElement compiler options to be functions (17951)
Cloud & DevOps
https://code.visualstudio.com/updates/v1112
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 9.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-20131ransomware use | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | 2026-03-19 |
| CVE-2025-43510 | Apple Multiple Products | Apple Multiple Products Improper Locking Vulnerability | 2026-03-20 |
| CVE-2025-43520 | Apple Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability | 2026-03-20 |
| CVE-2025-31277 | Apple Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability | 2026-03-20 |
| CVE-2025-32432 | Craft CMS Craft CMS | Craft CMS Code Injection Vulnerability | 2026-03-20 |
| CVE-2025-54068 | Laravel Livewire | Laravel Livewire Code Injection Vulnerability | 2026-03-20 |
| CVE-2026-20963 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-03-18 |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 2026-03-18 |
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | Wing FTP Server Information Disclosure Vulnerability | 2026-03-16 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Astral to Join OpenAI1489 points · 901 comments · 2026-03-19
- 02Kagi Translate now supports LinkedIn Speak as an output language1469 points · 345 comments · 2026-03-17
- 03OpenCode – Open source AI coding agent1274 points · 618 comments · 2026-03-20
- 04Afroman found not liable in defamation case1250 points · 739 comments · 2026-03-19
- 05Google details new 24-hour process to sideload unverified Android apps1196 points · 1262 comments · 2026-03-19
- 06Rob Pike’s Rules of Programming (1989)1020 points · 448 comments · 2026-03-18
- 07I'm OK being left behind, thanks1000 points · 765 comments · 2026-03-20
- 08Have a fucking website948 points · 525 comments · 2026-03-18
- 09My astrophotography in the movie Project Hail Mary911 points · 200 comments · 2026-03-22
- 10Reddit User Uncovers Who Is Behind Meta's $2B Lobbying for Age Verification Tech907 points · 22 comments · 2026-03-17
- 11Some things just take time853 points · 273 comments · 2026-03-21
- 12PC Gamer recommends RSS readers in a 37mb article that just keeps downloading841 points · 396 comments · 2026-03-22
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.