Fastify Fixed Four Ways Requests Can Bypass Route Checks
The route map matters as much as the package version. Owners can review the relevant checks before closing the change.
Application Security
Next.js Patched Seven Security Flaws, but the Critical One Is Still Missing
Next.js 16.3.8 fixes seven security flaws, but the announced critical fix remains pending. The 15.5.27 release has a narrower list, with one branch-scope conflict.
A Prefix Check Could Let JavaScript Escape vm2
A missing path boundary turned an allowed module into a route to neighbouring code running inside the host process.
Why None of 12 AI Models Passed AWS’s Code-Review Trust Test
AWS tested 12 general-purpose AI models on vulnerable code and safe lookalikes. None met its simultaneous false-alarm and missed-bug target.