Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...

Correction and Apology] Regarding the re-verification of coding tests (October 26, 2026)In this article, I reported that I ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Additional Verification] Regarding the operation of editing tools (October 26, 2026)After publication, I re-tested the ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

Debug RLEF reward arithmetic in Python: distinguish sampled log ratios from exact KL, test clipping bias, and verify ...

UCSB and Microsoft's ScholarEvolve generates code from academic papers to improve an agent's harness without retraining model ...

ScholarEvolve uses published research to improve AI agents, raising Qwen's AppWorld task completion from 69% to 81.4% without retraining the model.

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed ...

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

LiteLLM says an unrevoked master key exposed on GitHub let an attacker poison version 1.107.0, downloaded an estimated 49,000 ...