Tag
· The Patch
The Patch
A quiet morning — no new actionable advisories landed on the tracked AI or .NET stack in the June 30–July 1 window. The day's disclosure volume (an Open Babel cluster, Twig sandbox fixes, Sigstore's Fulcio) all sits off-stack.
Jul 1, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 1, 2026
· The Patch
The Patch
Two threads worth your version pins — a semantic-router advisory that points at litellm 1.83.7 (the build that also closes the KEV-listed proxy SQL injection), and pnpm's sixteen-advisory coordinated release about a lockfile you didn't write.
Jun 30, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 30, 2026
· The Patch
The Patch
A second quiet morning in a row — the last 24 hours weren't short on disclosures, just short on ones that touch anything we track. The day's volume (OpenAM criticals, a long Snipe-IT batch, a Quest NetVault wave) all sits off-stack.
Jun 25, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 25, 2026
· The Patch
The Patch
A genuinely quiet morning — no new actionable advisories landed on the tracked AI or .NET stack in the last 24 hours. The only thing on the radar is a low-to-moderate LiteLLM CVE cluster from the weekend that the vendor hasn't matched with advisories of its own.
Jun 24, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 24, 2026
· The Patch
The Patch
LiteLLM's CVE-2026-42271 is in CISA's exploited-vulnerabilities catalog, and a host-header flaw in Starlette underneath it chains the bug into unauthenticated RCE on AI gateways.
Jun 17, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 17, 2026