A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Koi security researchers found that when NPM installs a dependency from a Git repository, configuration files such as a ...

Over the past years, the author of the cURL project, [Daniel Stenberg], has repeatedly complained about the increasingly poor ...

AWS recently published a security bulletin acknowledging a configuration issue affecting some popular AWS-managed open-source ...

After three years of development, the team behind Skip, a solution designed to create iOS and Android apps from a single ...

From fine-tuning open source models to building agentic frameworks on top of them, the open source world is ripe with ...