Tech radar: week 30 of 2026
20–26 Jul 2026
In the week of 20–26 Jul 2026, 13 notable open-source releases shipped (including FastAPI 0.140.0, Laravel v13.22.0, Anthropic Python SDK v0.120.0), CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Claude Opus 5” (1778 points).
Releases worth knowing about
Web frameworks
⚡️ Reduce memory usage in dependencies. PR 16049 by @tiangolo.
[13.x] Fix PHP extensions in sqlite workflow job by @lucasmichot in https://github.com/laravel/framework/pull/60850
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.mdv830
This release contains security fixes for the following advisories:mentions security
AI & machine learning
api: add claude-opus-5 model (bf4e31c)
api: accept None for promptcachekey/safetyidentifier (36820e6)
Changes since langchain-core==1.4.9
Testing & security tools
🧱 New component testing model
Changelog: https://docs.cypress.io/app/references/changelog15-19-0
Cloud & DevOps
SECURITY: There is a security fix in the release.mentions security
https://code.visualstudio.com/updates/v1130
Today, we are excited to share the 7.9.0 stable release 🎉mentions security
Mobile & desktop
Added net.WebSocket, a WHATWG-compatible WebSocket client for the main process that routes through Chromium's network stack. 52344 <sup(Also in 42)</s
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 6.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-16232 | Check Point SmartConsole | Check Point SmartConsole Improper Authentication Vulnerability | 2026-07-22 |
| CVE-2021-27137 | DD-WRT DD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | 2026-07-21 |
| CVE-2026-0770 | Langflow Langflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 2026-07-21 |
| CVE-2026-50522 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-22 |
| CVE-2026-60137 | WordPress Core | WordPress Core SQL Injection Vulnerability | 2026-07-21 |
| CVE-2026-63030 | WordPress Core | WordPress Core Interpretation Conflict Vulnerability | 2026-07-21 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Claude Opus 51778 points · 1334 comments · 2026-07-24
- 02OpenAI and Hugging Face address security incident during model evaluation1632 points · 1157 comments · 2026-07-21
- 03Writing by hand is good for your brain1491 points · 668 comments · 2026-07-23
- 04US citizen charged after GrapheneOS phone wipes during airport search1340 points · 1120 comments · 2026-07-26
- 05China’s open-weights AI strategy is winning1243 points · 931 comments · 2026-07-20
- 06Kill The Cookie Banner1156 points · 595 comments · 2026-07-26
- 07Terence Tao's ChatGPT conversation about the Jacobian Conjecture counterexample1128 points · 637 comments · 2026-07-22
- 08Advertise in ChatGPT1096 points · 842 comments · 2026-07-21
- 09Startup founders urge U.S. government not to shut off Chinese open weight AI1069 points · 889 comments · 2026-07-23
- 10Show HN: Bento - An entire PowerPoint in one HTML file (edit+view+data+collab)1033 points · 239 comments · 2026-07-22
- 11Android may soon restrict on-device ADB1010 points · 509 comments · 2026-07-25
- 12Who's afraid of Chinese models?995 points · 910 comments · 2026-07-20
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.