Home Assistant 2026.9 Adds Security Alerts and Removes the VLC Integration
Home Assistant 2026.9, “There’s room on this bus,” is now the stable release. The Security dashboard gains an Active alerts…
Category: News
Self-hosting and open-source news that matters.
-
-
Gitea v1.27.3 Ships 18 Security Hardening Fixes
Gitea v1.27.3 landed August 29, 2026 with an unusually long SECURITY section: 18 separate access-control hardening fixes, none carrying a…
-
Paperless-ngx 3.1.0 Adds AI Workflow Actions and Document Versioning
Paperless-ngx 3.1.0 landed on August 27, 2026, adding a workflow action that applies AI-generated tag and correspondent suggestions automatically, per-document…
-
BookStack Security Update Patches Critical RCE Flaw in v26.05.4
BookStack v26.05.4, released August 24, 2026, is a dedicated security update patching four vulnerabilities: a critical RCE (CVE-2026-82450) exploitable through…
-
Open WebUI v0.11.1 Adds Human-in-the-Loop Tool Approval
Open WebUI v0.11.1 adds human-in-the-loop tool approval, letting you manually confirm certain tool calls before the AI runs them. The…
-
Gitea RCE Flaw Now Under Active Exploitation, CISA Confirms
CISA has added CVE-2026-60004, the critical Gitea RCE flaw patched in version 1.27.1, to its Known Exploited Vulnerabilities catalog, confirming…
-
Portainer Docker 2.45.0 LTS Fixes a Critical Proxy Bypass
Portainer 2.45.0 LTS landed on August 27, rolling up the 2.40-2.44 STS releases into a new Long Term Support base.…
-
n8n Patches Nine Security Advisories, Including Two Remote Code Execution Bugs
n8n’s August 20 security bulletin patches nine advisories, six of them High severity, including two separate paths to remote code…
-
authentik 2026.8 Is OpenID Certified, With a Rust Rewrite and Two Breaking Changes
authentik 2026.8 arrived on 18 August 2026 as a major release for the self-hosted identity provider. It brings official OpenID…
-
Grafana 13.2.0 Is Both a Security Fix and a Feature Release
Grafana 13.2.0 arrived on 18 August 2026 carrying two separate stories: a High-severity authorization flaw in Unified Alerting, tracked as…
