Tech radar: week 36 of 2026
31 Aug – 6 Sep 2026
In the week of 31 Aug – 6 Sep 2026, 14 notable open-source releases shipped (including Ollama v0.34.0, Electron electron v44.2.0, Anthropic Python SDK v1.4.0), CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Discovery of a new OpenAI agent message board” (2301 points).
Releases worth knowing about
AI & machine learning
Use Ollama models in ChatGPT Desktop
api: add Claude Tag category and user breakdowns to usage reports (9fce1e4)
Changes since langchain==1.3.18
api: add gpt-6-astra and related features (3791) (09f446f)mentions security
PyTorch 2.14.0 Release Notesmentions security
Mobile & desktop
Fixed a pending read on a net.request chunked upload stream inside a protocol handler never settling when the request failed or was aborted. 53373 <su
Web frameworks
This release includes a fix for the following security issue:mentions security
[12.x] Backport 60908: Avoid quadratic wildcard rule expansion by @matteo-palazzo in https://github.com/laravel/framework/pull/61232
Testing & security tools
Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Changelog: https://docs.cypress.io/app/references/changelog16-0-0
Cloud & DevOps
- 15460 93d72a5 Thanks @QnJ1c2kNCg! - Support gzip compression for JSON Pipelines sinks
What's new highlightsmentions security
https://code.visualstudio.com/updates/v1136
Automation
1.123.76 (2026-09-02)mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 10.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-59822 | BerriAI LiteLLM | BerriAI LiteLLM Improper Authentication Vulnerability | 2026-09-02 |
| CVE-2026-85046 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2026-09-04 |
| CVE-2026-82329 | JFrog Artifactory | JFrog Artifactory Improper Authentication Vulnerability | 2026-09-02 |
| CVE-2026-49869 | Kestra Kestra OSS | Kestra OSS OS Command Injection Vulnerability | 2026-09-02 |
| CVE-2026-48710 | Kludex Starlette | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-02 |
| CVE-2026-82078 | PaperCut NG/MF | PaperCut NG/MF Unsafe Reflection Vulnerability | 2026-08-31 |
| CVE-2026-81578 | PaperCut NG/MF | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 2026-08-31 |
| CVE-2026-9586 | Sangoma Switchvox | Sangoma Switchvox SQL Injection Vulnerability | 2026-09-02 |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-09-02 |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2026-09-02 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Discovery of a new OpenAI agent message board2301 points · 1603 comments · 2026-09-04
- 02GPT-6 Astra2279 points · 2081 comments · 2026-09-03
- 03.name Termination2230 points · 547 comments · 2026-09-03
- 04Claude Fable 5.1 and Claude Mythos 5.11419 points · 1395 comments · 2026-09-01
- 05QBittorrent breaks out of sandbox to commit crimes1355 points · 293 comments · 2026-09-06
- 06Audacity 4.01163 points · 266 comments · 2026-09-03
- 07Gemini 3.8 Flash and 3.8 Flash Cyber1160 points · 669 comments · 2026-09-02
- 08Hang on to Your Firefox994 points · 537 comments · 2026-09-01
- 09Nitter and XCancel resume service after legal advice930 points · 410 comments · 2026-09-06
- 10AnkiDroid: Google Play no longer allowing Open Collective donation link924 points · 281 comments · 2026-09-01
- 11How accurate have Ed Zitron's AI skeptic predictions been?879 points · 1056 comments · 2026-09-01
- 12Fastpotify855 points · 570 comments · 2026-09-01
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.