Khalid Aboubakr Engineering Desk
Important security, runtime, AI-API and platform news — and what it actually means for engineering teams. Written automatically from primary sources, checked against them in code, and independently reviewed before publication. About the desk
Engineering Practice6 min read
A point release that changes how database-heavy Laravel apps behave under failure, plus a security-flavoured Concurrency fix that ships with no advisory.
6 min read
A verifier-side conformance gap in the OpenWallet Foundation's SD-JWT JavaScript libraries lets a credential holder silently remove a claim, and key binding does not stop it.
7 min read
AWS has fixed an unsafe-reflection flaw in the Amazon Redshift JDBC Driver in 2.3.0, but exposure depends on who controls your connection strings and what sits on your classpath.
7 min read
Upgrading Stanza past 1.12.2 fixed one pickle code-execution path, but 1.14.0 added a second one in the lemmatizer that weights_only=True does not see; 1.15.0 fixes it.