dependency management

Azure Anomaly Detector retires on October 1, 2026, so create a dependency register now, collect Azure Advisor evidence, inventory candidate resources, and then search endpoints, credential references, container definitions, and production callers before selecting a replacement. Microsoft’s...

Microsoft’s Security Update Guide lists CVE-2026-39827 as a denial-of-service flaw in golang.org/x/crypto/ssh, where an authenticated SSH client can repeatedly open channels that a server rejects, leaking memory until the server process crashes. The Go security team disclosed the underlying...

CVE-2026-25680 is a Go vulnerability published on May 22, 2026, affecting golang.org/x/net before version 0.55.0, where the html parser can spend excessive CPU time processing attacker-supplied HTML and cause denial of service in applications that parse untrusted markup. The bug is not...

Microsoft’s Security Update Guide entry for CVE-2026-42012 describes a GnuTLS certificate-validation bypass, published in late May 2026, in which certificates carrying URI or SRV Subject Alternative Names can be mishandled and accepted through a fallback to Common Name hostname checks in...

Microsoft has listed CVE-2026-45644 as an elevation-of-privilege vulnerability in the Microsoft Live Share Canvas SDK in its June 2026 Security Update Guide, making this a developer-supply-chain security issue rather than a conventional Windows desktop patch emergency. The important word is not...

Microsoft's security catalog now lists CVE-2026-23654 — a high‑severity remote code execution (RCE) issue tied to the GitHub repository microsoft/zero-shot-scfoundation — and the vendor has issued an official remediation as part of the March 10, 2026 patch cycle. The flaw is not a classic...

A deceptively small flaw in Helm’s dependency update path can let a malicious chart turn a routine developer action into local code execution — an issue tracked as CVE-2025-53547 and fixed in Helm v3.18.4. The bug hinges on how fields from a crafted Chart.yaml are carried into Chart.lock and how...