Tech radar: week 34 of 2026
17–23 Aug 2026
In the week of 17–23 Aug 2026, 15 notable open-source releases shipped (including Ollama v0.33.0, Rust Rust 1.98.0, Bun Bun v1.4), CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Aaron Swartz was prosecuted for scraping, while Meta does it without consequence” (1704 points).
Releases worth knowing about
AI & machine learning
Developers can now easily configure Claude Desktop to seamlessly work with Ollama as a third-party gateway provider.
client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details
Changes since langchain-core==1.5.6
deps: update dependencies with published security fixes (3680) (53aa4fc)mentions security
Languages & runtimes
<a id="1.98.0-Language"</a
curl -fsSL https://bun.com/install | bash
Cloud & DevOps
1.15.9 (August 19, 2026)mentions security
https://code.visualstudio.com/updates/v1134
What's new highlightsmentions security
- [CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/queryrange for values other than true and all. Other values still ena
Update urgency: SECURITY: There are security fixes in the release.mentions security
ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.
Web frameworks
[13.x] Add JobReleased event to Worker by @jackbayliss in https://github.com/laravel/framework/pull/61108
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-21-0
SHA-256: 93a5d11a9ad510622acaaf908c556a7b9b764d338e78a7567f3689bf5081fd54mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 9.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-59310ransomware use | Broadcom VMware vCenter | Broadcom VMware vCenter Path Traversal Vulnerability | 2026-08-18 |
| CVE-2026-65400 | Apple macOS | Apple macOS Improper Authentication Vulnerability | 2026-08-18 |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 2026-08-18 |
| CVE-2026-55040 | Microsoft SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | 2026-08-18 |
| CVE-2026-64849 | MLflow MLflow | MLflow Server-Side Request Forgery Vulnerability | 2026-08-19 |
| CVE-2025-62593 | Ray-Project Ray | Ray-Project Ray Code Injection Vulnerability | 2026-08-17 |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 2026-08-21 |
| CVE-2026-72530 | TrueConf Server | TrueConf Server Code Injection Vulnerability | 2026-08-20 |
| CVE-2026-72529 | TrueConf Server | TrueConf Server Missing Authentication for Critical Function Vulnerability | 2026-08-20 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Aaron Swartz was prosecuted for scraping, while Meta does it without consequence1704 points · 404 comments · 2026-08-20
- 02OpenLogi1635 points · 430 comments · 2026-08-19
- 03Everything I own, owned1453 points · 351 comments · 2026-08-23
- 04The Amazon tax1415 points · 705 comments · 2026-08-18
- 05Kagi added a setting for removing paywalled links from search results1275 points · 394 comments · 2026-08-21
- 06AI;DR (AI; Didn't Read)1119 points · 692 comments · 2026-08-17
- 07Felony charges for citizen deleting phone data at US Border1107 points · 1383 comments · 2026-08-21
- 08Don't paste the AI, please1061 points · 580 comments · 2026-08-20
- 09AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint1059 points · 337 comments · 2026-08-20
- 10A joke domain purchase turned in geopolitical warfare1035 points · 171 comments · 2026-08-19
- 11HTML Can Do That1023 points · 231 comments · 2026-08-19
- 12OpenRouter is joining Stripe964 points · 500 comments · 2026-08-19
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.