Vulnerabilities & updates
Page 50
Tue, May 10
Forge: Ubuntu 22.04 Support
We're excited to announce that Laravel Forge now supports Ubuntu 22.04 (Jammy) - the latest Ubuntu LTS release from Canonical!
Mon, May 9
Announcing the Web-interoperable Runtimes Community Group
Deno partners with Cloudflare and others on runtime interoperability through web standards.
Fri, May 6
Vapor: Aurora Serverless v2 Is Now Available
This new version adds support for MySQL 8.0, and has a faster, more granular, less disruptive scaling than Aurora Serverless v1.
Thu, May 5
CakeFest 2022: The Official CakePHP Conference
- our annual conference dedicated to CakePHP will be virtual this year allowing bakers from all over the world to attend, from home! Two full days of CakePHP knowledge. Day 1 is workshops and day 2 will be a full day of talks on CakePHP related technologies. These events are an ideal way to learn as both beginners and advanced users. CakeFest 2022 Date: September 29 & 30 Time: 12:00pm UTC Check out details at: CakeFest.org
Tue, May 3
Wed, April 27
How to setup a blog with Hugo and Deno Deploy
Set up and deploy a blog to the edge in minutes.
Mon, April 25
Dutch PHP Conference 2022 - Schedule
We are thrilled to present the schedule of the Dutch PHP Conference 2022. This conference is a Online Edition, full of high-level technical sessions. Last year we welcomed visitors from a whopping 55+ countries! We hope to host another great and globally online edition of DPC this year. FREE ! You can register now We look forward to virtually meeting you on June 24! Mark those calendars!
Thu, April 21
Deno 1.21 Release Notes
Deno 1.21 has improvements to testing facilities, the REPL, adds deno check, improves the language server, adds a new subprocess API, and more
Manage Composer Credentials with Laravel Forge
Forge now makes it even easier and quicker to manage your server's Composer package configurations and deployments with the introduction of the new "Packages" panel.
Drupal core - Moderately critical - Access bypass - SA-CORE-2022-009
Project: Drupal core Project machine name: drupal Date: 2022-April-20 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Access bypass Affected versions: >= 9.3.0 <9.3.12 CVE IDs: CVE-2022-25274 Description: Drupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated with existing permissions, resulting in some possible access bypass for users who have access to use revisions of content generally, but who do not have access to individual items of node and media content.…
Drupal core - Moderately critical - Improper input validation - SA-CORE-2022-008
Project: Drupal core Project machine name: drupal Date: 2022-April-20 Security risk: Moderately critical 12 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Improper input validation Affected versions: >= 8.0.0 <9.2.18 || >= 9.3.0 <9.3.12 CVE IDs: CVE-2022-25273 Description: Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter cr…
Wed, April 20
Routinator 0.11.2 released
We have just released Routinator 0.11.2 which fixes an issue causing the integrated RTR server to not always report the complete set of withdrawn VRPs and router keys to a router. This could cause a router to possibly retain withdrawn VRPs or router keys for some time. This …
Netlify Edge Functions on Deno Deploy
Introducing Netlify Edge Functions built on Deno Deploy.
Tue, April 19
Laravel Forge Command Palette
Today we're happy to ship a wonderful new feature to Laravel Forge: the Forge Command Palette! We love making Forge the fastest, simplest, and most enjoyable way to manage your Laravel servers across...
Fri, April 15
PHP 8.0.18 Released!
The PHP development team announces the immediate availability of PHP 8.0.18. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.18 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.5 Released!
The PHP development team announces the immediate availability of PHP 8.1.5. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.5 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, April 14
PHP 7.4.29 Released!
The PHP development team announces the immediate availability of PHP 7.4.29. This is a security release for Windows users. This is primarily a release for Windows users due to necessarily upgrades to the OpenSSL and zlib dependencies in which security issues have been found. All PHP 7.4 on Windows users are encouraged to upgrade to this version. For source downloads of PHP 7.4.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, April 12
Spark 2.0 Now Available!
We're happy to announce that Spark 2.0 is now available! Spark Stripe 2.0 includes support for [Cashier Stripe](https://github.com/laravel/cashier-stripe) v13, offering the latest compatibility enhan...
Fri, April 8
Laravel Nova 4.0 Now Available!
This week we are thrilled to launch Nova 4.0 - the largest update to Laravel Nova since its initial release in 2018. David, Mior, and the rest of the Nova team have been hard at work to make this the...
Thu, April 7
Routinator 0.11.1 released
We are pleased to announce the latest release of Routinator, version 0.11.1. Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow. This release improves the output …
Wed, April 6
A Whole Website in a Single JavaScript File
Explanation and making of a website in a single JavaScript file
Tue, April 5
Fri, April 1
Supabase Functions on Deno Deploy
Supabase developers can now deploy global edge functions on Deno Deploy.
Tue, March 29
Vapor: Applications May Now Have Up to 10 GB Of Temporary Storage
AWS recently announced that AWS Lambda now supports up to 10 GB ephemeral storage. In other words, this means that your Vapor environment functions may now hold up to 10 GB of information in the `/tmp` directory.
Tue, March 22
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-006
Project: Drupal core Project machine name: drupal Date: 2022-March-21 Security risk: Moderately critical 11 ∕ 25 AC:Complex/A:None/CI:None/II:Some/E:Theoretical/TD:Default Vulnerability: Third-party libraries Affected versions: >= 8.0.0 <9.2.16 || >= 9.3.0 <9.3.9 CVE IDs: CVE-2022-24775 Description: Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released a security update which may affect some Drupal sites. We are issuing this security advisory outside our regular Drupal security release window schedule since Guzzle has alr…
Fri, March 18
PHP 8.1.4 Released!
The PHP development team announces the immediate availability of PHP 8.1.4. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, March 17
Deno 1.20 Release Notes
Deno 1.20 increases performance, auto-compresses http responses, adds 'deno task', adds 'deno bench', allows import maps in deno.json, and more
PHP 8.0.17 Released!
The PHP development team announces the immediate availability of PHP 8.0.17. This is a bug fix release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-005
Project: Drupal core Project machine name: drupal Date: 2022-March-16 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Third-party libraries Affected versions: >= 8.0.0 <9.2.15 || >= 9.3.0 <9.3.8 CVE IDs: CVE-2022-24728 CVE-2022-24729 Description: The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal . Vulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can create or edit content (e…
Wed, March 16
Fri, March 11
Thu, March 10
Tue, March 8
How to use Google Analytics in Deno Deploy
An example of how to use server-side Google Analytics in Deno
How to Upgrade to React 18
As we shared in the release post, React 18 introduces features powered by our new concurrent renderer, with a gradual adoption strategy for existing applications. In this post, we will guide you through the steps for upgrading to React 18.
React v18.0
React 18 is now available on npm! In our last post, we shared step-by-step instructions for upgrading your app to React 18. In this post, we'll give an overview of what's new in React 18, and what it means for the future.
Tue, March 1
How to publish Deno modules to NPM
dnt and oak - making code work across Deno and Node.js
Mon, February 28
Routinator 0.11.0 released
We are pleased to announce the latest release of Routinator, version 0.11.0. Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow. This release adds TLS support …
Wed, February 23
Fri, February 18
PHP 8.0.16 Released!
The PHP development team announces the immediate availability of PHP 8.0.16. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog