Tech radar: week 9 of 2026
23 Feb – 1 Mar 2026
In the week of 23 Feb – 1 Mar 2026, 15 notable open-source releases shipped (including FastAPI 0.135.0, Prometheus 3.10.0 / 2026-02-24, Deno v2.7.0), CISA added 3 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “We Will Not Be Divided” (2645 points).
Releases worth knowing about
Web frameworks
✨ Add support for Server Sent Events. PR 15030 by @tiangolo.
| Commit | Description |
[12.x] Add multipleOf support to JsonSchema numeric types by @Amirhf1 in https://github.com/laravel/framework/pull/58903
Fixed incorrect handling of X-Forwarded-For in the AWS Lambda adapter behind ALB that could allow IP-based access control bypass. The detail: https://mentions security
Cloud & DevOps
Prometheus now offers a distroless Docker image variant alongside the defaultmentions security
What's new highlightsmentions security
emit container status events after network reconnection (fixes 13524) by @MaheshThakur9152 in https://github.com/docker/compose/pull/13529
SECURITY: There is a security fix in the releasementions security
Languages & runtimes
Read more: http://deno.com/blog/v2.7
\[b0a79b10f0] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) 61713mentions security
Mobile & desktop
Added support for long-animation-frame script attribution (via --enable-features=AlwaysLogLOAFURL). 49771 <sup(Also in 40, 41)</sup
AI & machine learning
Please note that this release was branch cut on Feb 8, so any features added to vLLM after that date is not included.mentions security
api: change arrayformat to brackets (925d2ad)
api: add phase (391deb9)
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-11-0
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 3.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2022-20775 | Cisco SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | 2026-02-25 |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 2026-02-25 |
| CVE-2026-25108 | Soliton Systems K.K FileZen | Soliton Systems K.K FileZen OS Command Injection Vulnerability | 2026-02-24 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01We Will Not Be Divided2645 points · 841 comments · 2026-02-28
- 02Microgpt1936 points · 324 comments · 2026-03-01
- 03OpenAI – How to delete your account1929 points · 362 comments · 2026-02-28
- 04The Age Verification Trap: Verifying age undermines everyone's data protection1670 points · 1301 comments · 2026-02-23
- 05Google API keys weren't secrets, but then Gemini changed the rules1291 points · 304 comments · 2026-02-25
- 06Ladybird adopts Rust, with help from AI1274 points · 698 comments · 2026-02-23
- 07I'm helping my dog vibe code games1106 points · 377 comments · 2026-02-24
- 08How do I cancel my ChatGPT subscription?1073 points · 253 comments · 2026-02-28
- 09The whole thing was a scam993 points · 323 comments · 2026-02-28
- 10Layoffs at Block910 points · 1080 comments · 2026-02-26
- 11Ghostty – Terminal Emulator863 points · 359 comments · 2026-03-01
- 12Danish government agency to ditch Microsoft software (2025)842 points · 434 comments · 2026-02-25
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.