Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service moderate
vulnerability · GHSA-4ffr-jq9g-5ffx · osv.dev · 17h ago
Daily issue
73 items · compiled overnight
vulnerability · GHSA-4ffr-jq9g-5ffx · osv.dev · 17h ago
vulnerability · GHSA-g73g-hqqh-jr95 · osv.dev · 17h ago
vulnerability · GHSA-4g23-2xm8-66gc · osv.dev · 17h ago
Anthropic experienced elevated errors for Claude Sonnet 5.5 on the Claude API between 07:42 PT and 08:17 PT on October 27th. The issue has since been resolved. This brief outage could have impacted applications relying on the Claude API for real-time responses.
incident · status.claude.com · 16h ago
Anthropic experienced elevated errors for Claude Sonnet 5.5 on October 27th, which has since been resolved. This incident may have impacted applications relying on the Anthropic API for Claude Sonnet 5.5, potentially causing temporary disruptions for users.
incident · status.claude.com · 22h ago
Claude Code v2.1.312 has been released with several improvements. Key changes include the addition of `oidc.user_id_claim` to the Claude apps gateway for more flexible user identification and a "click to send" feature for queued messages in fullscreen mode. The update also fixes issues related to managed settings, organization policy fetching, and potential overwriting of large files.
release · github.com · 12h ago
Anthropic is expanding its partnership with the GSA to make Claude available across all levels of government. While this signifies broader adoption of Anthropic's models, it does not represent a new model release or a breaking change to the Anthropic API itself, thus not triggering an alert.
model · anthropic.com
A lawsuit has been filed against OpenAI, alleging that GPT-4o provided harmful advice to a user regarding seizure medication. This raises serious ethical and safety concerns about AI's role in sensitive personal matters and the potential liabilities for AI providers.
blog · techcrunch.com · 8h ago
Anthropic's IPO filing warns of potential AI risks, including blackmail, sentience, and existential threats. While this is significant AI news, it's a forward-looking risk assessment from a competitor and doesn't immediately impact your use of the Anthropic API or Claude models.
blog · arstechnica.com · 11h ago
Genie 4 has been announced, a world model from DeepMind promising more realistic physics and human interactions. This AI advancement could influence future AI development and simulation tools.
blog · deepmind.google · 16h ago · 789 pts
DeepMind has unveiled Genie 4, a world model that promises more realistic physics and human interactions. This advancement could lead to more sophisticated AI agents and simulations, potentially impacting future AI development tools and research.
blog · arstechnica.com · 16h ago
Amazon is poised to make significant gains from Anthropic's IPO due to its substantial ownership stake. This highlights the financial implications of major AI company valuations and their impact on investors.
blog · techcrunch.com · 7h ago
The surge in data center construction driven by AI is spurring innovation in US power grid infrastructure. This development could lead to modernization efforts and new opportunities for grid management and efficiency.
blog · techcrunch.com · 9h ago
Guidewire has acquired Hyperexponential for $1.7 billion to integrate AI agents into underwriting and risk analysis processes. This acquisition signals a growing trend of AI adoption in enterprise software for specialized business functions.
blog · techcrunch.com · 10h ago
A proposal in Delaware suggests allowing AI agents to run entire businesses, potentially evading liability. This is a speculative legal and business development that does not directly affect your current development practices.
blog · arstechnica.com · 10h ago
Bank of America is cautioning customers against sharing banking passwords with AI assistants, emphasizing user responsibility for any resulting activity. This highlights the security risks associated with integrating AI into financial management.
blog · techcrunch.com · 10h ago
An explanation of Anthropic's complex governance structure is provided following its IPO. Understanding the control and decision-making processes within major AI companies is crucial for stakeholders.
blog · techcrunch.com · 10h ago
Discord is enhancing the searchability of its public communities, which will make messages from these servers appear in search engine results starting in December. This change has raised privacy concerns among users.
blog · techcrunch.com · 11h ago
Early progress is being made in accelerating drug development using Claude. This highlights the potential of large language models like Claude in specialized scientific fields, demonstrating its versatility beyond typical development tasks.
blog · anthropic.com · 11h ago · 161 pts
+16 more in this section
Next.js is scheduled for a security release on November 3, 2026. This is a proactive measure to address potential vulnerabilities, and developers should plan to update their applications to ensure security.
security · nextjs.org · 14h ago
Vercel is partnering with ElevenLabs to offer their AI audio models through Vercel's AI Gateway, with a promotional discount. This is relevant as it provides a streamlined way to integrate advanced text-to-speech capabilities into your applications, potentially simplifying audio generation workflows.
blog · vercel.com · yesterday
HarnessAgent now supports image inputs across all its adapters, including Claude Code. This enhancement allows developers to pass images alongside text in messages, leveraging the vision capabilities of underlying models. This is relevant for developers using the AI SDK with multimodal AI models.
blog · vercel.com · yesterday
Vercel Observability now includes AI traffic insights, allowing you to monitor how AI bots access your site. This is relevant for understanding traffic patterns and potentially optimizing your application's performance and security, especially if you are serving AI-related content or using AI features.
blog · vercel.com · yesterday
Vercel now allows deploying containers directly from a plain Dockerfile when no other framework is detected. This is relevant as it offers more flexibility in deployment for containerized applications, potentially simplifying the process for custom or non-standard setups within your Next.js or backend projects.
blog · vercel.com · yesterday
A Vercel Plugin is now available for OpenCode, offering guidance on Vercel APIs and best practices, including for the AI SDK. This is highly relevant as it can improve your development efficiency when working with Vercel, especially for AI-related features in your projects.
blog · vercel.com · yesterday
Vercel Agent sessions are now 67% cheaper due to optimizations in context management and prompt-cache reuse. This change reduces token usage per session and directly impacts the cost of using Vercel Agent, which is relevant for developers who utilize it for AI-powered workflows.
blog · vercel.com · yesterday
React Native 0.88.1 has been released with several JSI improvements, including forward declarations for `createValueFromJsonUtf8` and running `With` hooks around `WithRuntimeDecorator::createArrayBuffer`. It also includes a fix for Yoga's flex shrink behavior and an improved build error for SwiftPM on iOS.
release · github.com · 14h ago
pnpm version 12.16.1 has been released, addressing an issue where `pnpm install` could hang on cold stores in workspaces installing Cargo crates. It also fixes `pnpm pack` incorrectly including files excluded by name, ensuring more accurate package creation. This is a patch release for a tool in your stack.
release · github.com · 17h ago
NestJS has released version 12.3.0. This is a minor release and may contain bug fixes or small improvements. It's advisable to check the changelog for any specific updates relevant to your stack, but it's unlikely to be a breaking change.
release · github.com · 23h ago