Tag
GitLab 发布关键补丁版本，修复 CVSS 10.0 的未认证远程代码执行漏洞（CVE-2026-110264），该漏洞源于正则表达式编译器中的整数溢出，影响 7.0 至 19.5 的多个版本。
OpenClaw v2026.10.3 is a patch release focused on update recovery, Doctor fixes that preserve saved data, Mac setup improvements, and more resilient conversation handling across plugins and runtimes.
A Local Privilege Escalation vulnerability in adm-zip allows crafted ZIP files to set SUID/SGID bits, enabling root access for local users when extracted as root. The issue has been patched in version 0.6.1.
A patch release for DSPy includes CodeInterpreter fixes, MCP 2.0 support, GEPA bump, and improvements to errors and callbacks.
GreptimeDB v1.1.2 is a patch release that fixes scheduled Flows now() binding for deterministic EVAL INTERVAL windows, along with bug fixes for Kafka SASL password redaction, GC index file listing, parquet metadata cache size, Prometheus label discovery scan, and PromQL time binary aggregation. It is recommended for users to upgrade.
A security researcher discovered a Remote Code Execution (RCE) vulnerability in Claude Code caused by improper parsing of deeplink settings, allowing arbitrary command injection via hooks. The issue has been resolved in version 2.1.118.