Tag
· The Patch
The Patch
A 9.8 unauthenticated RCE lands against a 26,000-star agent project that has never cut a release, so there is no version to pin — and the fix that merged three days earlier only takes effect if you set an environment variable.
Aug 14, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 14, 2026
· The Patch
The Patch
Six NLTK advisories landed in the hours before 3.10.3 shipped, so not one of them names the version that fixes it — and one is a high whose only affected version is 3.10.2, the release this digest spent two weeks telling you to upgrade to.
Aug 13, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 13, 2026
· The Patch
The Patch
NLTK publishes six advisories on its own repository, none of which your scanner can see, and one of them says the path sandbox everyone has been patching toward has been disabled by default the whole time.
Aug 10, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 10, 2026
· The Patch
The Patch
NLTK's four high-severity fixes reach the advisory database six weeks after the release that closed them, the open-source agent engine flyto-core takes two criticals, and dssrf needs a second patch in two days.
Aug 1, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 1, 2026