aug 28, 2026
9 links from the engineering internet.
workerd v1.20260828.1 lands a memory cache v2 written in safe rust
the august 28 workers runtime cut reimplements the memory cache as a v2 in safe rust, fixes a negative text input check that was rejecting streamable data, and fills in the missing workers ai model types.
sveltekit ships six advisories for experimental remote functions
cve-2026-82259 is the sharpest of the batch: a small payload expands into a huge file array during remote form deserialization, burning cpu with no auth needed. patched in 2.53.3. apps that never check files.length are the exposed ones.
budibase 3.41.3 patches a critical rce in plugin handling
cve-2026-82244, cvss 9.4: the server calls eval() on plugin javascript in the main node process with no sandbox, so an admin-uploaded tarball runs arbitrary code. default deployments run as root, which turns it into full host compromise.
gitoxide submodule name check misses nested dot-dot sequences
cve-2026-82253: gix-validate looked only at the first occurrence of .. in a submodule name, and the check was never wired into production paths anyway. with submodule open inheriting full trust, a crafted .gitmodules reads arbitrary git config. fixed in gix 0.82.0.
dovecot reads an oauth2 audience claim as a scope when scope is absent
cve-2026-73208: if a token response carries no scope claim, dovecot validates the audience against the configured required scopes instead, so a token with no relevant permissions authenticates when its audience happens to match a scope name.
llama.cpp b10672 moves openvino to 2026.3.1 and puts qwen3.5 on npu
the openvino backend picks up whisper.cpp support, qwen3.5 execution on npu, and new relu, pool_2d, quick_geglu and roll ops, plus chunked prefill, token-count independent compiled models, and a parallelized static model build.
filebrowser stalls on named pipes in archive and download handlers
cve-2026-82235, cvss 8.2: the directory archive and public download paths never validate named pipes, so repeated requests for an archive containing one park goroutines in blocking open syscalls until the server stops answering. affects through 2.63.23.
eclipse lyo lets a provisional oauth client act as a trusted one
cve-2026-18918, cvss 9.1: with two-legged auth enabled, abstractadaptercredentialsfilter accepts a self-registered provisional client as trusted with no administrator approval. the three-legged flow rejects it correctly. affects 2.0.0 through 7.0.0.
siyuan asset.upload mcp tool accepts paths outside the workspace
cve-2026-82233: the asset.upload mcp tool takes arbitrary absolute file paths with no workspace boundary check, so a prompt injection can walk an agent into copying ssh keys or credentials into the asset directory. fixed in v3.8.1.