#open-source
Latest news about Open source: context, sources and what to do.
60 articles
Analizamos la guía técnica sobre los mecanismos internos de PostgreSQL que triunfa en Hacker News, explorando su arquitectura y formato web.
Discover CVE-2026-95731, a critical CVSS 9.8 vulnerability in HPE Networking Fabric Composer caused by hardcoded passwords.
Discover details about CVE-2026-115231, a high-severity memory corruption vulnerability in Eclipse ThreadX affecting module communication.
Discover CVE-2026-119675, an 8.6 CVSS vulnerability in MongoDB Database Tools mongorestore allowing unauthorized root account creation.
Discover Octomind, an open-source Rust AI coding harness that saves tokens, reduces execution costs, and runs across multiple surfaces.
Discover how a developer reverse-engineered a 2014 Renault Latitude TomTom navigation system firmware just to fix the dashboard clock time.
Analyze CVE-2026-115215, a CVSS 8.7 vulnerability in Eclipse ThreadX NetX Duo affecting DTLS session pools and causing denial of service.
Safari 27.3 beta introduces Adaptive Dark Mode to automatically transform light websites into a dark experience, featuring web developer controls and privacy protections.
Encrypted firmware on Nvidia RTX Spark laptops restricts GPU clock speeds to 780 MHz on Linux, impacting AI inference performance.
Discover the launch of Kitty 0.50, featuring new improvements for developers, GPU acceleration updates, and active discussion in tech communities.
Discover CVE-2026-63395, a critical CVSS 8.8 vulnerability in isomorphic-git prior to 1.38.6 allowing arbitrary file writes via symlinks.
Discover Palette, a lightweight 20B open-weight model designed to generate custom presentation decks using synthetic data and a verification harness.
Discover critical CVE-2026-63471 in fastapi-code-generator. Learn how unescaped OpenAPI paths enable code injection and how version 0.8.1 fixes it.
Discover a comparative analysis of AI agent harnesses CUGA, Hermes, and Deep Agents, exploring how architecture impacts enterprise task performance.
Critical CVE-2026-89293 vulnerability in Eclipse Mnestix Browser CVSS 8.8 allows unauthenticated actions. Learn mitigation steps and impact.
Discover Kairos, the viral open-source risk and fraud decisioning platform for real-time event intelligence and AI agent tuning.
Discover StateBench, a new benchmark evaluating how language models track state changes across long documents using four algebraic difficulty levels.
Discover Lichii, a very experimental C++ open-source emulator for Nintendo Switch and Switch 2 trending on GitHub, featuring code from yuzu and Eden.
Discover Ultra-Water, a viral GitHub repository featuring a real-time FFT ocean renderer for Three.js and WebGL2 with caustics and high frame rates.
El borrador de C++26 ha sido rechazado en la votación DIS de la ISO debido a desacuerdos sobre los contratos, generando un bloqueo histórico sin precedentes.
Discover Stringman, an $800 open-source room-scale gripper robot by Neufangled Robotics that spans entire rooms using ceiling-anchored cables.
Discover CVE-2026-44267, a critical 9.8 CVSS remote code execution vulnerability in Elo expression language prior to version 1.0.1.
Discover how Qwen 3.8 27B running locally on a laptop successfully interprets raw neural network weights to identify classic games without code execution.
Postman desktop application silently installs AI plugins for coding agents like Codex and Claude Code, raising serious user consent and security concerns.
Discover details about CVE-2026-119977, a critical TOCTOU race condition vulnerability in WordPress Core currently under active exploitation.
An historical analysis on how a modern chess engine running on a vintage 1996 Pentium Pro could have easily defeated Garry Kasparov.
Discover details about CVE-2026-120065, a CVSS 7.1 vulnerability in PostgreSQL psqlODBC affecting updatable cursors and positioned queries.
Discover CVE-2026-115653, a CVSS 7.0 privilege escalation vulnerability in Eclipse ThreadX for Cortex-M architectures affecting versions 6.0.1 to 6.5.2.202603.
Discover CVE-2026-120429, a CVSS 7.1 authorization flaw in Camaleon CMS before 2.9.2 that exposes media and private files to low-privileged users.
Discover CVE-2026-120314, a CVSS 7.3 missing authentication vulnerability in Network-AI affecting versions 5.14.0 before 5.15.5. Learn how to mitigate it.
Discover CVE-2026-120313, a high-severity CVSS 7.5 path traversal vulnerability in Network-AI InputSanitizer. Learn how to mitigate it.
Discover CVE-2026-20585, a CVSS 7.5 modem vulnerability causing out-of-bounds writes via rogue base stations. Learn mitigation steps and patch details.
Revolut migrates two thousand engineers to a self-hosted GLM on Nvidia B200s, slashing costs and improving lead times.
Discover Idol-sdk on GitHub: a powerful open-source inference toolkit that converts a single image into detailed 3D Gaussians using consumer GPUs.
NVIDIA releases Auto Ontology as an open-source tool under Apache 2.0 to build context and semantic layers for enterprise AI agents and text-to-SQL workflows.
Discover details about CVE-2026-106808, a stack-based buffer overflow in OpenAirInterface Core Network v2.2.1 UDM component with a CVSS score of 7.5.
Polyend releases the firmware source code for Tracker, Tracker+ and Tracker Mini, launching Community Edition 1.0 with advanced features.
Discover CVE-2026-81938, a high-severity CVSS 7.7 vulnerability in Grafana Mimir allowing local file reading through Alertmanager configurations.
Discover CVE-2026-120436, a CVSS 7.8 integer and heap buffer overflow vulnerability in Netpbm affecting multiple versions.
Discover details about CVE-2026-120438, a high-severity heap buffer overflow in QuickJS-NG before 0.16.0 affecting 32-bit hosts. Learn mitigation steps.
New Linux kernel patches resolve CVE-2026-99239, a CVSS 7.8 critical race condition vulnerability in the Bluetooth L2CAP subsystem.
Explore Model Integration Contracts (MIC) in Hugging Face Transformers, a standard using shrunk model fixtures and CPU tests to catch regressions early.
Discover Pika H3 Flex on GitHub: a viral open-weight tool for video and synchronized audio generation in six steps using Python.
Discover details about CVE-2026-94349, an OS command injection vulnerability affecting Dell OpenManage Enterprise versions prior to 4.8.0.
Discover CVE-2026-120324, a critical CVSS 8.3 path traversal vulnerability in Aklivity Zilla affecting http-filesystem Binding. Learn mitigation steps.
Discover CVE-2026-117518, a CVSS 8.2 vulnerability in Fastify reply-from plugin allowing upstream path traversal via backslash dot-segments.
Discover details about CVE-2026-111048 in FOSSBilling, an 8.4 CVSS vulnerability involving unescaped support notes, and how version 0.8.9 fixes it.
Discover DiscImageStudio, an open-source utility to generate and burn visible artwork onto CDs, DVDs, and Blu-ray discs across multiple platforms.
Discover Own Your HackerTube, an AI video curator inspired by Andrej Karpathy that filters creator channels according to your custom standards.
Discover ramenvr/autopilot, a viral GitHub repository that brings continuous AI learning and automated playtesting to Unreal, Unity, and Godot.
OpenAI details how they scale Git to manage their massive codebase infrastructure, gaining significant attention in the tech community.
Discover joeblau/subvox, a viral GitHub repository using AirPods Pro head motion data to turn silently mouthed words into text on macOS.
Discover how the viral GitHub repository print-my-profile-pic turns developer stars into physical profile pictures printed on a receipt printer.
Explore Tongjiang Lab, a viral GitHub repository offering 54 free interactive 3D science lessons for high school physics, chemistry, and biology.
Discover RuiC-PoseAtlas on GitHub, a zero-dependency static repository providing trilingual reference libraries for AI art, poses, costumes, and portraits.
Explore Hacker Times, a unique New York Times-inspired web interface that lets you browse Hacker News stories like a traditional daily newspaper.
Discover HairDeck on GitHub, a viral tool that generates animation-ready stylized hair cards and spring-bone chains from a single image.
Discover OpenBMB MiniCPM-OCR, a viral GitHub repository featuring fast, accurate document parsing and OCR correctness assessment powered by AI.
Discover the new NIST cybersecurity guide designed specifically for solopreneurs, independent developers, and solo business owners with no prior IT experience.
Learn how DSH-Android lets you run DeepSeek Harness directly on your Android phone without root or Termux using an embedded Node.js engine.