Vulnerabilities & updates
Page 44
Thu, March 30
Fri, March 24
Vapor: Application Logs Reloaded
Today, we're excited to announce that by combining the power of CloudWatch with the sleek and intuitive Vapor UI, we're making application logs available directly in the Vapor dashboard.
Thu, March 23
Deno 1.32: Enhanced Node.js Compatibility
Deno 1.32 brings major improvements to deno compile, Node.js compatibility, Web APIs, and more.
Wed, March 22
React Labs: What We've Been Working On – March 2023
In React Labs posts, we write about projects in active research and development. We've made significant progress on them since our last update, and we'd like to share what we learned.
Tue, March 21
Web Summer Camp 2023
Web Summer Camp is a conference with hands-on workshops for web developers, designers and decision-makers. Besides 2 tracks about UX/PM processes and web technologies there will be 3 tracks for non-beginner developers with hands-on workshops on topics related to JavaScript, PHP and Symfony. Take home practical knowhow on relevant tools and techniques useful in your every day work and join us in person this summer on the Croatian coast. All the information on this year's event you can find on our web site
Mon, March 20
Why We Added package.json Support to Deno
The most recent release brought some significant changes in the form of better Node and NPM compatibility with package.json support. This prompted questions from our users about whether our core priorities have shifted.
Sat, March 18
Bun v0.5.8
Introducing `expect()` snapshots in `bun test`, preloading modules using `bun --preload`, basic glob star support in bun install, improvements to Web & Node.js compatibility, lots of bug fixes, and a teaser of what's next.
Thu, March 16
PHP 8.2.4 Released!
The PHP development team announces the immediate availability of PHP 8.2.4. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.17 Released!
The PHP development team announces the immediate availability of PHP 8.1.17. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Introducing react.dev
Today we are thrilled to launch react.dev, the new home for React and its documentation. In this post, we would like to give you a tour of the new site.
Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Access bypass Affected versions: <7.95 || >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: Drupal core provides a page that outputs the markup from phpinfo() to assist with diagnosing PHP configuration. If an attacker was able to achieve an XSS exploit against a privileged user, they may be able to use the phpinfo page to access sensitive information that could be used to escalate the attack…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-003
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 13 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages. The URL of unpublished translations may be disclosed. When used in conjunction with a module like Pathauto, this may reveal the title of unpublished content. This adv…
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-002
Project: Drupal core Project machine name: drupal Date: 2023-March-15 Security risk: Moderately critical 14 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Information Disclosure Affected versions: >=8.0.0 <9.4.12 || >=9.5.0 <9.5.5 || >=10.0.0 <10.0.5 Description: The Media module does not properly check entity access in some circumstances. This may result in users seeing thumbnails of media items they do not have access to, including for private files. This release was coordinated with SA-CONTRIB-2023-010 . This advisory is not covered by Drupal Steward . Solution…
Wed, March 15
Thu, March 9
Embedded and cloud Elixir for grid-management at Sparkmeter
A case study of how Elixir is being used at SparkMeter.
Wed, March 8
Build a REST API with Express, TypeScript, and Deno
How to setup a REST API using Express and TypeScript in minutes.
Tue, March 7
Introducing the Annual State of Edge Functions Survey
Together we can identify current and upcoming trends as well as common frustrations to better understand how to best use this nascent technology.
Thu, March 2
You Don't Need a Build Step
The build step helps Node.js/npm run in the browser, optimize end-user performance, etc. But long build times limit productivity. With modern tooling, do we still need a build step?
Fri, February 24
Bun has docs now
Bun has docs now? Bun has docs now.
Deno 1.31: package.json support
Deno 1.31 adds support for package.json, stabilizes Node-API, Deno.Command API, adds `node:v8` module, and more.
Bun v0.5.7
Support for `FormData` and `git` dependencies, better `setTimeout()` compatibility, `bun wiptest` is now `bun test`, and better support on AWS Lambda and GitHub Actions.
Next.js 13.2
Next.js 13.2 introduces major improvements to the App Router in preparation for stability, including SEO support, Route Handlers, MDX for Server Components, Type-Safe Links, and more.
Wed, February 22
Office Hours Roundup and Update
We’ve got Q&A highlights from our last two live events and updates about Office Hours going forward.
Fri, February 17
Wed, February 15
Roll your own JavaScript runtime, pt. 2
We'll implement `fetch`, read command line arguments, and add native support for TypeScript and TSX.
PHP 8.1.16 Released!
The PHP development team announces the immediate availability of PHP 8.1.16. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.1 users are advised to upgrade to this version. For source downloads of PHP 8.1.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.3 Released!
The PHP development team announces the immediate availability of PHP 8.2.3. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.2 users are advised to upgrade to this version. For source downloads of PHP 8.2.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, February 14
PHP 8.0.28 Released!
The PHP development team announces the immediate availability of PHP 8.0.28. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. All PHP 8.0 users are advised to upgrade to this version. For source downloads of PHP 8.0.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Laravel 10 Released
Today we're thrilled to announce that we have tagged the Laravel 10.0 release! Laravel 10 continues the improvements made in Laravel 9 by introducing argument and return types to all application skel...
Thu, February 9
Bun v0.5.6
Support for `Bun.sleep`, improved Docker support, and improvements to Node.js and npm compatibility
Wed, February 8
Build a Simple Image Resizing API in less than 100 LOC
A tutorial on building and deploying a simple image resizing API.
Volar: a New Beginning
Most users of Volar know it as the official Vue.js VSCode extension. It started as a personal project when the official recommendation was still Vetur, and over time got adopted as the new official extension due to improved architecture and performance. As a project created to improve the quality of life for developers, we spent over two years before reaching 1.0 , and have been continuously shipping stability improvements. But we've still got more work to do, and there are exciting plans for 2023.
Tue, February 7
SymfonyCon Brussels 2023
is the global conference in English for Symfony and PHP developers. Two days of workshops (December 5-6) followed by two days (December 7-8) full of talks on PHP, Symfony and its ecosystem. SymfonyCon Brussels 2023 Join us and discover the amazing city of Brussels (Belgium) while you share fun and knowledge with developers from all around the World. Check out all the conference details
SymfonyOnline June 2023
is the online conference in English for Symfony and PHP developers from all around the World. Two days of online workshops (June 13-14) followed by two days (June 15-16) full of online talks on PHP, Symfony and its ecosystem. SymfonyOnline June 2023 Check out all the conference details
SymfonyLive Paris 2023
is the Symfony conference for French-speaking developers. Two days of workshops (March 21-22) followed by two days (March 23-24) full of talks on PHP, Symfony and its ecosystem. SymfonyLive Paris 2023 Check out all the conference details
Fri, February 3
PHP 8.1.15 Released!
The PHP development team announces the immediate availability of PHP 8.1.15. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Bun v0.5.5
Improved compatibility for `node:http`, support for `http.request()` and `stripe-node`, and fixed various bugs.
Thu, February 2
PHP 8.2.2 Released!
The PHP development team announces the immediate availability of PHP 8.2.2. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Wed, February 1
The Future (and the Past) of the Web is Server Side Rendering
A brief history about server-side rendering and why it's the right approach for modern web development.
Tue, January 31
Bun v0.5.2
MongoDB support, `github:` dependencies in `bun install`, faster `Buffer`, `bun run` for WebAssembly, express' `body-parser` package, and many bug fixes.