This week in software: Aug 24–30, 2026
1056 releases from 467 products, Monday to Sunday UTC. The most notable, ranked by how widely each product is used, with every security-tagged release listed in full.
TL;DR
AI-generatedGitLab patched authenticated-user denial-of-service and untrusted-control-sphere issues in Duo Claude AI agent across versions 19.3.1, 19.2.5, and 19.1.7. Google Chrome LTS fixed use-after-free and buffer-overflow CVEs across DOM, Media, and Network components. Traefik v3.7.12 and v2.11.56 addressed CVE GHSA-cjr6-pf59-jq29 and related vulnerabilities. OpenSSL 3.0.22 closed heap buffer overflow and invalid pointer dereference in CMS and CMP. Among 1056 releases this week, Kubernetes v1.37.0, Node.js v26.8.1, and transformers v5.16.1 shipped core updates.
Generated Aug 31, 2026 from the releases listed on this page.
Security fixes
Hoppscotch
Hoppscotch · Developer ToolsData-driven collection runs with CSV or JSON data files; REST and GraphQL requests in a single unified workspace; Request documentation loss on save; Connection timeout dropdown…
Google Chrome
Google · BrowsersFixed inappropriate implementation in CORS (CVE-2026-76033); Fixed use after free in Media (CVE-2026-12462); Fixed insufficient validation of untrusted input (CVE-2026-12025)…
Google Chrome
Google · BrowsersFixed use after free in DOM (CVE-2026-76021); Fixed buffer overflow in Network (CVE-2026-76022); Fixed use after free in HTML (CVE-2026-19559); Fixed privilege elevation in Import…
ClickHouse
ClickHouse · Databases & DataValidate Iceberg metadata file path for null bytes.; Fixed out-of-bounds read in formatRowNoNewline with empty rows.; Fixed uninitialized memory exposure in query results.; Fixed…
Notable releases
hermes-agent
NousResearch · AIConsent-gated real-profile browsing using your default Chromium profile for local browsing with Windows close-with-approval flow; Desktop Browser with its own OS window and…
Kubernetes
CNCF · Infrastructure & DevOpsSee kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.
react-native
Meta · Frameworks & LibrariesAdd hard fail and clear error message when an autolinking plugin host is referenced as a dependency in SwiftPM; Bump Hermes to version 250829098.0.17; Type Animated.Value.addListen…
transformers
huggingface · AIAdd support for GLM-5.3-Flash, a natively multimodal model with 320B total parameters and 18B active parameters; Restore backward compatibility for the tensor-parallel API; Fix…
Counter-Strike 2
Valve · Gamescustomhudlayout entity for scripted maps to provide custom UI with support for Panel, Label, Image, and Button panel types; CSS styling support for customhudlayout entities…
open-webui
open-webui · AIHuman in the loop tool approval where administrators can enable requiring manual approval for tool execution in conversations; Built-in tool allowing models to pause and ask up to…
Claude Code
Anthropic · Developer ToolsAdded PreModelSwitch and PostModelSwitch hook events to block, confirm, or annotate a model switch; SessionStart resume hooks now receive session staleness and estimated re-cache…
Material UI
MUI · Frameworks & LibrariesAdd theme.focusVisible opt-in keyboard focus ring across components; Prevent sticky hover border on touch devices in buttongroup; Complete Traditional Chinese localization…
gemini-cli
gemini-cli · AIDynamically resolve Cloud Workstations proxy redirect URI for OAuth flows; Resolve swallowed directory mismatch in IDE connections; Add evaluation validation functionality; Add…