Tech radar: week 35 of 2026
24–30 Aug 2026
In the week of 24–30 Aug 2026, 17 notable open-source releases shipped (including Svelte [email protected], OpenAI Python SDK v3.6.0, LangChain langchain==1.4.0a1), CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Nvidia agrees to acquire Hugging Face for $13B” (1988 points).
Releases worth knowing about
Web frameworks
- feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (18648)
This release includes fixes for the following security issues:mentions security
This release contains security fixes for the following advisories:mentions security
create-vite: add nub package manager support (23019) (c31c499)
AI & machine learning
api: add computeunits to Responses and Chat Completions usage (3749) (52421d1)
fix(langchain): name the content type MCP conversion could not handlementions security
api: beta files/skills namespaces use GA shapes; drop dated beta header pins (9df4565)
This release features 584 commits from 270 contributors (76 new)!mentions security
This is a special release as we include GLM! (and a few small fixes)mentions security
- Client accepts StdioServerParameters directly: Client(StdioServerParameters(command="uv", args=["run", "server.py"])) (3321).
Languages & runtimes
Out-of-band release to fix node --version which was reporting an alpha version.
Cloud & DevOps
See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.
1.16.0 (August 26, 2026)
https://code.visualstudio.com/updates/v1135
Prisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and imentions security
Mobile & desktop
Chromium 152.0.7977.54
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 11.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | 2026-08-26 |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-08-26 |
| CVE-2026-60004 | Gitea Gitea | Gitea Code Injection Vulnerability | 2026-08-25 |
| CVE-2026-66384 | JFrog Artifactory | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 2026-08-27 |
| CVE-2026-53362 | Linux Kernel | Linux Kernel Unspecified Vulnerability | 2026-08-27 |
| CVE-2022-0995 | Linux Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 2026-08-26 |
| CVE-2019-1068 | Microsoft SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-08-26 |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 2026-08-24 |
| CVE-2023-49105 | ownCloud ownCloud | ownCloud Improper Authentication Vulnerability | 2026-08-27 |
| CVE-2015-3246 | Red Hat Libuser | Red Hat Libuser Race Condition Vulnerability | 2026-08-26 |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | 2026-08-26 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Nvidia agrees to acquire Hugging Face for $13B1988 points · 925 comments · 2026-08-27
- 02How Europe is killing makers and micro-entrepreneurs1647 points · 1033 comments · 2026-08-24
- 03Dolly Parton has died1602 points · 249 comments · 2026-08-25
- 04Creepy Crawlies1390 points · 710 comments · 2026-08-29
- 05Apple introduces M6 and M5 Ultra1312 points · 1307 comments · 2026-08-25
- 06“I just chose words carefully”1255 points · 353 comments · 2026-08-30
- 07Nitter and XCancel receive cease and desist notices1214 points · 1352 comments · 2026-08-25
- 08GLM-5.3-Flash1132 points · 580 comments · 2026-08-26
- 09AWS Acquires DuckLabs1102 points · 316 comments · 2026-08-26
- 10GUIs should be fully keyboard-driven1055 points · 528 comments · 2026-08-28
- 11CEO fired developers to make room for AI. Developers create open source AI CEO1035 points · 716 comments · 2026-08-27
- 12Xiaomi: New CPU matches Apple cores single threaded, much faster multithreaded1003 points · 736 comments · 2026-08-24
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.