Kai Ole Hartwig

Blog

Security analyses, DevSecOps, TYPO3 & Kubernetes — and, in between, personal notes from life as a caregiving father. Posts in the “Personal” category are exactly that.

Blog

DevSecOps

CI/CD pipelines, container security, code audits, patch workflows, eBPF detection — operational security across the entire build-run stack.

26.09.2026
Pod certificates instead of shared secrets
→26.09.2026
PHP 8.6 RC2 (Release Roadmap)
→26.09.2026
laravel-mediable CVE-2026-93352 (RCE)
CVE-2026-93352 (CVSS 9.3) · laravel-mediable 7.0.0–7.0.1 · Fix: 7.0.2
→26.09.2026
orval CVE-2026-96754+ (6 CVEs)
CVE-2026-96754 through 96759 (6 CVEs, CVSS up to 9.3) · orval < 8.30.0 · Fix: 8.28.0–8.30.0 depending on CVE
→24.09.2026
npm Package tw-pkgprobe-7731 (Twilio Credential Theft)
No CVE · npm package tw-pkgprobe-7731 (versions 1.0.0–1.1.1) · Publisher account removed
→24.09.2026
Sylius 1.12.25+ Security Release (4 Advisories)
GHSA-f6mx-qxjc-55xf (CVSS 8.8) + 3 more advisories · Sylius 1.12.x/1.13.x/1.14.x/2.1.x/2.2.x · Fix: 1.12.25/1.13.17/1.14.20/2.1.16/2.2.9
→24.09.2026
WordPress CVE-2026-87902 (Actively Exploited)
CVE-2026-87902 (CVSS 9.2) · WordPress 4.7.0–7.1.1 · Fix: 7.1.2 (actively exploited since Sep 22, 2026)
→24.09.2026
SGLang CVE-2026-93088 (Unpatched RCE)
CVE-2026-93088 (CVSS 9.8) · SGLang 0.5.11–0.5.14 · No fix available (as of Sep 24, 2026)
→19.09.2026
TYPO3 14.3.7 + 13.4.35 (2 Advisories)
CVE-2026-77132 (CVSS 5.3) + CVE-2026-85400 (CVSS 7.5) · TYPO3 10.4–14.3.6 · Fix: 14.3.7/13.4.35/12.4.49/11.5.54/10.4.60
→19.09.2026
redis-parser CVE-2026-93435 (ioredis DoS)
CVE-2026-93435 · CVSS 7.5/8.7 · redis-parser ≤ 3.0.0 (ioredis) · Fix: not yet released
→19.09.2026
vLLM CVE-2026-93436 (Memory Exhaustion)
CVE-2026-93436 · CVSS 7.5/8.7 · vLLM ≤ 0.29.0 (disaggregated prefill/decode) · Fix: not yet released
→17.09.2026
PraisonAI CVE Cluster (Jobs API RCE)
→
Contact

Sounds like a fit?
Then write to me.

No form marathon, no sales funnel. A short message — I get back to you personally and tell you honestly whether I can help.

Book a call