Tech radar: week 22 of 2026
25–31 May 2026
In the week of 25–31 May 2026, 14 notable open-source releases shipped (including Svelte [email protected], vLLM v0.22.0, Rust Rust 1.96.0), CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “I'm Tired of Talking to AI” (2013 points).
Releases worth knowing about
Web frameworks
- feat: allow declarations in the template (18282)
| Commit | Description |mentions security
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.mdv7160
[13.x] Accept Symfony's new control-characters exception message in mailer test by @kieranbrown in https://github.com/laravel/framework/pull/60202
AI & machine learning
This release features 459 commits from 230 contributors (63 new)!
Changes since sdk==0.3.15
api: Add support for claude-opus-4-8, mid-conversation system blocks, and usage.outputtokensdetails (f18b014)
Languages & runtimes
<a id="1.96.0-Language"</amentions security
Cloud & DevOps
https://code.visualstudio.com/updates/v1122
This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestampmentions security
This is the General Availability release of Redis 8.8 in Redis Open Source.
Mobile & desktop
Added Linux support for app.getApplicationInfoForProtocol(). 51680
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-16-0
Automation
1.123.47 (2026-05-25)mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 5.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-48027ransomware use | Nx Nx Console | Nx Console Embedded Malicious Code Vulnerability | 2026-05-27 |
| CVE-2026-0257ransomware use | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2026-05-29 |
| CVE-2026-45321ransomware use | TanStack TanStack | TanStack Unspecified Vulnerability | 2026-05-27 |
| CVE-2026-8398 | Daemon Daemon Tools Lite | Daemon Tools Lite Embedded Malicious Code Vulnerability | 2026-05-27 |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 2026-05-26 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01I'm Tired of Talking to AI2013 points · 950 comments · 2026-05-27
- 02Claude Opus 4.81774 points · 1376 comments · 2026-05-28
- 03Magnifica Humanitas1650 points · 965 comments · 2026-05-25
- 04Can we have the day off?1415 points · 776 comments · 2026-05-28
- 05Bricks and Minifigs Stole a Man's $200k Lego Collection1394 points · 624 comments · 2026-05-28
- 06The dead economy theory1359 points · 1424 comments · 2026-05-29
- 07YouTube to automatically label AI-generated videos1322 points · 826 comments · 2026-05-27
- 08Using AI to write better code more slowly1257 points · 446 comments · 2026-05-25
- 09I think Anthropic and OpenAI have found product-market fit1094 points · 1245 comments · 2026-05-27
- 10Spain blocks prediction markets Polymarket, Kalshi over lack of gambling licence1083 points · 512 comments · 2026-05-26
- 11DuckDuckGo search saw 28% more visits after Google said people love AI mode1075 points · 525 comments · 2026-05-27
- 12California moves to exempt Linux from its age-verification law after backlash1066 points · 499 comments · 2026-05-25
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.