Tech radar: week 28 of 2026
6–12 Jul 2026
In the week of 6–12 Jul 2026, 12 notable open-source releases shipped (including Ollama v0.32.0, vLLM v0.25.0, Rust Rust 1.97.0), CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Apple sues OpenAI, accuses ex-employees of stealing trade secrets” (1660 points).
Releases worth knowing about
AI & machine learning
- New interactive agent experience: running ollama now launches an agent to help you code and delegate work
vLLM v0.25.0 Release Notesmentions security
api: gpt-5.6-sol updates (039d1fe)
PyTorch 2.13.0 Release Notes
Languages & runtimes
<a id="1.97.0-Language"</a
Welcome to our newest releaser, Stewart X Addison. Future Node.js releases may be signed with his release key, 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2Fmentions security
Web frameworks
Please refer to CHANGELOG.md for details.
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.mdv820
[13.x] Support inspecting reserved jobs on the queue fake by @jackbayliss in https://github.com/laravel/framework/pull/60644
Cloud & DevOps
This release is built with Go 1.25.12 and fixes a security issue in a UI dependency.mentions security
https://code.visualstudio.com/updates/v1128
Mobile & desktop
Fixed crash triggered by replacing an open application menu. 52276 <sup(Also in 41, 42, 44)</sup
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 6.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-48282 | Adobe ColdFusion | Adobe ColdFusion Path Traversal Vulnerability | 2026-07-07 |
| CVE-2026-56291 | Balbooa Forms | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-10 |
| CVE-2026-48939 | iCagenda iCagenda | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-10 |
| CVE-2026-56290 | Joomlack Page Builder | Joomlack Page Builder Improper Access Control Vulnerability | 2026-07-07 |
| CVE-2026-48908 | JoomShaper SP Page Builder | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-07 |
| CVE-2026-55255 | Langflow Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 2026-07-07 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Apple sues OpenAI, accuses ex-employees of stealing trade secrets1660 points · 966 comments · 2026-07-10
- 02EU Parliament greenlights Chat Control 1.01636 points · 864 comments · 2026-07-09
- 03GPT-5.61561 points · 1112 comments · 2026-07-09
- 04Decoding the obfuscated bash script on a Uniqlo t-shirt1489 points · 232 comments · 2026-07-08
- 05John Deere owners will get the right to repair equipment under FTC settlement1397 points · 306 comments · 2026-07-08
- 06Show HN: 18 Words1160 points · 366 comments · 2026-07-09
- 07Chatto is now open source1106 points · 304 comments · 2026-07-08
- 08Show HN: Getting GLM 5.2 running on my slow computer937 points · 240 comments · 2026-07-09
- 09Chat Control 1.0 and 2.0 Explained916 points · 352 comments · 2026-07-07
- 10Your 'app' could have been a webpage (so I fixed it for you)895 points · 549 comments · 2026-07-11
- 11Postgres rewritten in Rust, now passing 100% of the Postgres regression tests832 points · 728 comments · 2026-07-09
- 12OpenWrt One – Open Hardware Router832 points · 325 comments · 2026-07-06
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.