dev-news

Release log /

Tuesday, 10 November 2026

2 items across 2 nodes. Each one links its primary source.

  1. 01
    Go release history

    Go 1.27.4 / 1.26.11

    The Go release announcement lists 12 security fixes: CVE-2026-97033 through CVE-2026-97043 plus CVE-2026-97054. Eleven concern the build toolchain; CVE-2026-97054 fixes an HTTP/1 server crash caused by a MaxBytesReader header race.

    notes for Go 1.27.4 / 1.26.11announcement for Go 1.27.4 / 1.26.11

  2. 02
    VS Code release history

    Visual Studio Code 1.145.3

    Two confirmed security advisories patched in 1.145.3 are CVE-2026-102230 and CVE-2026-120780. The first fixes integrated-browser uploads that could expose local files without path-based approval. The second fixes a serve-web release downgrade that could restore vulnerable server behavior.

    notes for Visual Studio Code 1.145.3upload advisory for Visual Studio Code 1.145.3serve-web advisory for Visual Studio Code 1.145.3

Also as markdown and JSON. Quiet days get no entry.