MariaDB ships a subtle but dangerous crash in its query planner: CVE‑2023‑52971 causes servers running MariaDB 10.10 → 10.11. and 11.0 → 11.4. to abort when the planner’s JOIN rewriting routine enters a broken state inside JOIN::fix_all_splittings_in_plan, producing immediate and repeatable...
MariaDB servers in multiple supported release lines can crash without producing an actionable backtrace, producing a deterministic denial‑of‑service (DoS) condition tied to query optimization paths — a bug tracked as CVE‑2023‑52969 in public vulnerability catalogs and triaged in MariaDB’s issue...
MariaDB servers across multiple release lines are vulnerable to a denial‑of‑service crash (CVE‑2023‑52970) when processing certain queries that exercise the Item_direct_view_ref::derived_field_transformer_for_where logic, and operators should treat this as an immediate patching priority...
MariaDB’s widely used mariadb-dump utility contains a path‑traversal flaw that can be abused to write arbitrary files and achieve remote code execution when a user interacts with a malicious export — the issue is tracked as CVE‑2025‑13699 and was disclosed publicly via a Zero Day Initiative...
If you’re a web developer—or even just getting started in the world of web development—you’ve likely stumbled upon XAMPP during your search for simple development tools. The latest version, XAMPP 8.2.12, is officially available, consolidating everything you need into one tidy, open-source...
On the server back-end level:
PHP has been updated.
We are no longer using MySQL (see: MariaDB)
We are no longer using apache (see: Litespeedtech Enterprise Web Server)
A significant number of maintenance tasks were performed.
Mobile API was updated.
GTMetrix score page speed rating of 92...