News

Mailpit 1.31.1 Security Release!

Security release!

Security

  • Add --allowed-hosts flag to mitigate DNS rebinding against the API

Chore

  • Update Go dependencies
  • Update node dependencies
  • Update Github Actions

Fix

  • Block Azure WireServer, IPv4-translated prefix and additional reserved ranges in SSRF deny-list
  • Pass line-boundary state to drainData to prevent SMTP desync
  • Allow SP inside quoted local-parts per RFC 5321 (#731)
  • Bound header-rewrite scanner to header block and fail closed on missing header
  • Prevent quadratic CPU in proxy CSS rewriter via O(1) asset dedup

Composer 2.10.3 Security fix Released

Security release!

Security: Validate package bin paths against path traversal using symlinks (GHSA-96h3-5x6v-m776, CVE-2026-59944)
Security: Fixed command injection via malicious Perforce url (GHSA-rvx4-ffvw-m9q3)
Security: Sanitize URL-embedded usernames/token in a few more places (#13044)
Security: Fixed matching of gitlab URLs to avoid possible credential leak to the wrong domain (#12988)

Fixed PHP 8.6 deprecation warnings (#12967, #13028)
Fixed error output when a policy blocks a package version to be clearer (#12993)
Fixed the lock file's content-hash with a conflict marker ending up breaking at runtime (#13048)
Fixed possible race condition while creating directories like the cache dir when running multiple Composer processes in parallel (#12977)
Fixed forgejo support to handle empty repositories better (#12968)
Fixed FilterListApiClient not forwarding transport options (#13040)

Mariadb 13.0.2 Released

https://mariadb.com/docs/release-notes/community-server/changelogs/13.0/13.0.2

Mysql 26.7.0 Released

https://dev.mysql.com/doc/relnotes/mysql/26.7/en/news-26-7-0.html

Powershell 7.6.6 Released

7.6.6

Engine Updates and Fixes

  • Fix FileOnlyEntry crashing on older versions of Windows (#27931)
  • Add support for new WLDP setting EnableFileOnlyEntry (#27922)

General Cmdlet Updates and Fixes

  • Remove the <assembly> element from CmdletizationCoreResources.resx (#27932)

Tests

  • Fix the localization tests for Release Automation (#27945)

Build and Packaging Improvements

Update to .NET SDK 10.0.401

Customization improvements

Customizations apply to each console instead of system wide.

  1. Python 3.14.7 & 3.13.15 Released
  2. PHP 8.6.0 Beta 3 Released!
  3. Bearsampp September 2026 Release 2!
  4. Bearsampp September Release!

Page 4 of 73

Our Supporters

OCH
Joomdonation
Tassos gr
AM Graphix
codium
Bear

Sorry, this website uses features that your browser doesn't support. Upgrade to a newer version of Firefox, Chrome, Safari, or Edge and you'll be all set.