Posts
-
mcp-acronym-lookup v0.4.5 Security Rebuild Released
On 2026-10-22, mcp-acronym-lookup v0.4.5 was published. This release is a security rebuild with no functional changes to the server itself. The pre-compiled binaries have been rebuilt with a patched Go toolchain to address the compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943. For users running the official binaries, upgrading ensures the toolchain’s trust store no longer relies on the compromised certificates. Configuration, CSV format, CLI flags, and lookup behavior remain identical to v0.4.4. What’s new v0.4.5 contains no user-visible...
Read article -
localmodelproxy v0.9.4 Released: Security-Focused Rebuild
On October 22, 2026, UnitVectorY-Labs released localmodelproxy v0.9.4. This is a security-focused rebuild of the previous release with no functional changes to the proxy itself. The binaries are rebuilt with a Go toolchain that distrusts compromised eMudhra intermediate CAs referenced as GO-2026-6809 / CVE-2026-111943. For users, this means the same API, configuration, and behavior as v0.9.3, but with binaries produced from a hardened toolchain. What’s new v0.9.4 does not introduce new features or change the user-facing API. The proxy continues...
Read article -
gowebshot v0.2.5 Released
gowebshot v0.2.5 was released on October 22, 2026. This release is a security rebuild with no functional changes to the application. Binaries are rebuilt with Go 1.27.3 to distrust compromised eMudhra intermediate CAs referenced by GO-2026-6809 / CVE-2026-111943. For users, the upgrade is drop-in and preserves existing behavior while improving trust posture for TLS validation. What’s new v0.2.5 does not introduce new features, user-facing improvements, or bug fixes. The application code is identical to v0.2.4. The release focuses on the...
Read article -
gogitup v0.6.2: Security Rebuild for Trusted Binary Builds
On October 22, 2026, gogitup v0.6.2 was released for the UnitVectorY Labs project that keeps Go-installed tools up to date. This is a security-focused patch release with no functional changes to the tool itself. The prebuilt binaries have been rebuilt with Go 1.27.3 to address the compromised eMudhra intermediate Certificate Authorities referenced in GO-2026-6809 / CVE-2026-111943. For users who rely on the distributed binaries, updating ensures builds are produced with a toolchain that distrusts the affected CAs. What’s new v0.6.2...
Read article -
ghscanscope v0.3.1 — Security Rebuild
On 2026-10-22, ghscanscope v0.3.1 was released. This update is a security-focused rebuild with no functional changes to the application. The binaries are rebuilt with Go 1.27.3 to distrust the compromised eMudhra intermediate certificate authorities referenced as GO-2026-6809 / CVE-2026-111943. For users, behavior is identical to v0.3.0, but the release improves supply-chain and TLS trust posture for the distributed artifacts. What’s new v0.3.1 contains no new features, bug fixes, or breaking changes. The application code, configuration format, database schema, CLI flags,...
Read article -
ghrelgrab v0.2.2 — Security Rebuild
On October 22, 2026, ghrelgrab v0.2.2 was released. This is a security-focused rebuild with no functional changes to the CLI. The release updates the build toolchain to distrust compromised eMudhra intermediate CAs referenced by GO-2026-6809 / CVE-2026-111943, ensuring binaries are produced with an updated trust store. For users, the experience remains identical to v0.2.1, but upgrading is recommended for security posture. What’s new Security rebuild with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). The release...
Read article -
gcpidentitytokenportal v0.5.5 Released
On October 20, 2026, UnitVectorY-Labs published v0.5.5 for gcpidentitytokenportal, the web portal for vending GCP identity tokens via the metadata service with flexible audience selection. This is a maintenance and security-focused release with no new features or breaking changes. It delivers important dependency updates to reduce exposure to HTTP/2 vulnerabilities in the underlying transport stack and refreshes the build toolchain to Go 1.27.2. The update is a drop-in upgrade with no configuration changes required. What’s new v0.5.5 updates the core...
Read article -
lockboxkms v0.3.9: Security Maintenance Release
On 2026-10-20, UnitVectorY-Labs published lockboxkms v0.3.9. This is a maintenance and security-focused update with no changes to application functionality. The release hardens the underlying stack by updating the Go toolchain and key dependencies, most notably patching HTTP/2 vulnerabilities that are reachable through the gRPC/HTTP2 transport used by the Cloud KMS client and the application’s HTTP server. What’s new v0.3.9 contains no user-visible feature changes. The release focuses on dependency and toolchain updates: Security hardening via golang.org/x/net v0.61.0. The update addresses...
Read article -
firestore-batch-incrementer v0.1.7 – Security and Dependency Maintenance Release
On 2026-10-20, firestore-batch-incrementer v0.1.7 was published. This is a maintenance and security release with no changes to application logic. It updates the dependency stack used by the Firestore client and the build toolchain to address HTTP/2 security vulnerabilities and bring upstream libraries current. For users running the batch incrementer as a Cloud Run Job, the update is a drop-in replacement that reduces transport-layer exposure with no configuration changes required. What’s new Security updates to the HTTP/2 transport stack The release...
Read article -
authzjwtbearerinjector v0.3.9 released
On 2026-10-20, authzjwtbearerinjector v0.3.9 was published. This is a maintenance and security release focused on keeping the service safe to run in production behind Envoy Proxy. No application source code was changed; the update delivers important dependency fixes and CI reliability improvements with no configuration changes required. What’s new The headline change is a security hardening update to the Go standard library transport. The indirect dependency golang.org/x/net is upgraded to v0.61.0, patching multiple HTTP/2 vulnerabilities in the gRPC/HTTP2 stack used...
Read article
subscribe via RSS