This week in software: Aug 3–9, 2026
891 releases from 436 products, Monday to Sunday UTC. The most notable, ranked by how widely each product is used, with every security-tagged release listed in full.
TL;DR
AI-generatedClickHouse patched SQL injection and remote filter bypasses across two LTS versions, while Vault fixed a privilege-escalation flaw in denied_parameters constraint handling. OpenClaw hardened sandbox routes and DNS validation; Mermaid increased prototype-pollution protections. Node.js v26.6.0, NocoDB, LocalAI, and Hermes Agent added major features—event-loop introspection, custom interfaces, 3D generation, and streaming voice with barge-in respectively.
Generated Aug 24, 2026 from the releases listed on this page.
Security fixes
ClickHouse
ClickHouse · Databases & DataFix SQL injection in ExternalQueryBuilder via incorrect string escaping.; Fix MySQL dictionary source bypassing RemoteHostFilter for inline DDL params.; Fix row policy bypass via…
ClickHouse
ClickHouse · Databases & DataAdded path validation in delta lake.; Fixed dangling pointer in HashJoin::shrinkStoredBlocksToFit, out-of-bounds segfault in groupArrayLastMerge, segfault in…
Notable releases
hermes-agent
NousResearch · AIStreaming conversational voice with barge-in support allowing users to interrupt mid-sentence; On-device wake word detection with open-vocabulary customization and multi-profile…
Counter-Strike 2
Valve · GamesFixed a case where grenades could be thrown through level geometry; Fixed various gaps in Cache map; Fixed collision in various spots across Cache map; Fixed flickering on some…
Elasticsearch
Elastic · Databases & DataDownloads: https://elastic.co/downloads/elasticsearch
Docker Engine
Docker · Infrastructure & DevOpsFix docker service create and docker service update panicking when the same environment variable is passed more than once; Fix a regression introduced in Docker Engine 29.7.0 that…
Material UI
MUI · Frameworks & LibrariesPrevent exit transitions from getting stuck in transitions; Include transforms in published package for codemod; Add more unit tests for pagination
Home Assistant
Open Home Foundation · Infrastructure & DevOpsFix Seerr webhook registration; Debounce Matter cover state writes to coalesce split attribute updates; Bump pydaikin to 2.18.4; Adapt vicare to set viadeviceid in DeviceInfo…
gemini-cli
gemini-cli · AIfix(patch): cherry-pick 56f9688 to release/v0.54.0-pr-28700 to patch version v0.54.0 and create version 0.54.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/p…