The Standup
@standup.thecompound.tech
What you have to do something about. Releases, CVEs, outages, breaking changes.
Every post ends on the consequence for a system you own.
Edited by @kyisaiah47 · thecompound.tech/wire
Every post ends on the consequence for a system you own.
Edited by @kyisaiah47 · thecompound.tech/wire
Vercel reported delays to Drains, Observability data, and Build logs in Washington (iad1); processing recovered, and monitoring continues. #dev
October 10, 2026 at 1:23 AM
Vercel reported delays to Drains, Observability data, and Build logs in Washington (iad1); processing recovered, and monitoring continues. #dev
OpenAI is investigating a partial outage where ChatGPT workspace admins cannot view or manage plugin availability and settings; some users see plugins as unavailable. #software
October 9, 2026 at 10:44 PM
OpenAI is investigating a partial outage where ChatGPT workspace admins cannot view or manage plugin availability and settings; some users see plugins as unavailable. #software
OpenAI reported "delayed Costs data" in the Compliance API. ChatGPT usage and API Platform requests are unaffected, and other reporting channels remain available. #software
October 9, 2026 at 7:17 PM
OpenAI reported "delayed Costs data" in the Compliance API. ChatGPT usage and API Platform requests are unaffected, and other reporting channels remain available. #software
Ubuntu USN-8911-1 fixes Linux kernel vulnerabilities in linux-oem-6.17 for Ubuntu 24.04. Update to 6.17.0-1033.33, reboot, and rebuild third-party modules because the ABI changed. #software
October 9, 2026 at 3:50 PM
Ubuntu USN-8911-1 fixes Linux kernel vulnerabilities in linux-oem-6.17 for Ubuntu 24.04. Update to 6.17.0-1033.33, reboot, and rebuild third-party modules because the ABI changed. #software
CircleCI is delaying build data and notifications in its UI and API; the incident is identified and mitigation is in progress. #software
October 9, 2026 at 12:19 PM
CircleCI is delaying build data and notifications in its UI and API; the incident is identified and mitigation is in progress. #software
Hazelcast CVE-2026-107726 affects 5.6.0, 5.5.0-5.5.9 and versions before 5.4.5. A low-privileged client that can connect can read member memory and crash nodes; fixes are 5.7.0, 5.6.1, 5.5.10 and 5.4.5. #software
October 8, 2026 at 11:48 PM
Hazelcast CVE-2026-107726 affects 5.6.0, 5.5.0-5.5.9 and versions before 5.4.5. A low-privileged client that can connect can read member memory and crash nodes; fixes are 5.7.0, 5.6.1, 5.5.10 and 5.4.5. #software
generator-jhipster v7.0.0, v9.2.0 generates Spring WebFlux/R2DBC applications with SQL injection in the sort parameter; CVE-2026-107375 is in the generated reactive code. #software
October 8, 2026 at 8:52 PM
generator-jhipster v7.0.0, v9.2.0 generates Spring WebFlux/R2DBC applications with SQL injection in the sort parameter; CVE-2026-107375 is in the generated reactive code. #software
Elastic Cloud has identified cloud-storage issues affecting some Serverless projects in GCP us-central1, where project operations may be delayed or unavailable. #software
October 8, 2026 at 5:35 PM
Elastic Cloud has identified cloud-storage issues affecting some Serverless projects in GCP us-central1, where project operations may be delayed or unavailable. #software
Netlify resolved an incident that caused some Edge Function requests to return 502 errors and higher latency between 13:16 and 13:24 UTC. #software
October 8, 2026 at 3:08 PM
Netlify resolved an incident that caused some Edge Function requests to return 502 errors and higher latency between 13:16 and 13:24 UTC. #software
PraisonAI versions before 4.6.78 mis-handle HIGH prompt-injection matches in InjectionDefense, so a single-check attack can be logged instead of blocked; CVE-2026-61439 is bounded to that defense layer. #software
October 8, 2026 at 12:33 PM
PraisonAI versions before 4.6.78 mis-handle HIGH prompt-injection matches in InjectionDefense, so a single-check attack can be logged instead of blocked; CVE-2026-61439 is bounded to that defense layer. #software
OpenAI reported elevated errors with GPT-5.6 Instant in FedRAMP workspaces. The status page says all impacted services have now fully recovered. #software
October 8, 2026 at 12:59 AM
OpenAI reported elevated errors with GPT-5.6 Instant in FedRAMP workspaces. The status page says all impacted services have now fully recovered. #software
Ghost 6.56.0-6.65.0 lets any staff user run commands through a bookmark card image. CVE-2026-105642 is fixed in Ghost 6.67.0; Contributors are included in the affected scope. #software
October 7, 2026 at 9:32 PM
Ghost 6.56.0-6.65.0 lets any staff user run commands through a bookmark card image. CVE-2026-105642 is fixed in Ghost 6.67.0; Contributors are included in the affected scope. #software
WeasyPrint passes fetched image bytes to Pillow; with Ghostscript installed, attacker-controlled EPS or PS reaches the interpreter and can lead to RCE. CVE-2026-106443 bounds the path to that host setup. #software
October 7, 2026 at 6:15 PM
WeasyPrint passes fetched image bytes to Pillow; with Ghostscript installed, attacker-controlled EPS or PS reaches the interpreter and can lead to RCE. CVE-2026-106443 bounds the path to that host setup. #software
CircleCI resolved elevated infrastructure failures on jobs after Docker Gen2 wait times rose during recovery. Jobs using Docker Gen2 may have started late while wait times cleared. #dev
October 7, 2026 at 3:43 PM
CircleCI resolved elevated infrastructure failures on jobs after Docker Gen2 wait times rose during recovery. Jobs using Docker Gen2 may have started late while wait times cleared. #dev
Next.js 16.4 enables Cache Components by default in new create-next-app projects; existing apps keep the old model until migrated, while Next.js 17 will make Cache Components the default. #software
October 7, 2026 at 12:39 PM
Next.js 16.4 enables Cache Components by default in new create-next-app projects; existing apps keep the old model until migrated, while Next.js 17 will make Cache Components the default. #software
CVE-2026-41510 affects Coraza WAF 3.0.0 through 3.8.0: parameter flooding can make ArgumentLimit drop arguments and bypass ARGS-targeted rules. Coraza 3.8.1 fixes it. #software
October 6, 2026 at 10:40 PM
CVE-2026-41510 affects Coraza WAF 3.0.0 through 3.8.0: parameter flooding can make ArgumentLimit drop arguments and bypass ARGS-targeted rules. Coraza 3.8.1 fixes it. #software
Netlify's AI Gateway returned errors from 19:05 to 19:18 UTC; Netlify increased capacity and reported normal error rates afterward. #software
October 6, 2026 at 8:19 PM
Netlify's AI Gateway returned errors from 19:05 to 19:18 UTC; Netlify increased capacity and reported normal error rates afterward. #software
OpenAI's Computer Use is experiencing issues. Its status page says it is investigating Agents API and computer use, with Agents showing degraded performance. #software
October 6, 2026 at 5:24 PM
OpenAI's Computer Use is experiencing issues. Its status page says it is investigating Agents API and computer use, with Agents showing degraded performance. #software
Elastic Cloud is investigating delayed metrics for Serverless projects in Azure UAE North. The reported impact is limited to metrics displayed in the Cloud UI. #software
October 6, 2026 at 3:01 PM
Elastic Cloud is investigating delayed metrics for Serverless projects in Azure UAE North. The reported impact is limited to metrics displayed in the Cloud UI. #software
OpenAI's outage affecting ChatGPT, Codex, and the API is resolved: "All impacted services have now fully recovered." The status page lists login, file uploads, Responses, and Agents among the affected components. #software
October 6, 2026 at 12:21 PM
OpenAI's outage affecting ChatGPT, Codex, and the API is resolved: "All impacted services have now fully recovered." The status page lists login, file uploads, Responses, and Agents among the affected components. #software
CVE-2026-104846 affects plugin-capable Seroval releases from 0.12.0 through 1.6.0: fromJSON() can invoke plugin-produced callables when it assimilates a deserialized Promise thenable, bypassing the fix in 1.5.3. #dev
October 6, 2026 at 12:36 AM
CVE-2026-104846 affects plugin-capable Seroval releases from 0.12.0 through 1.6.0: fromJSON() can invoke plugin-produced callables when it assimilates a deserialized Promise thenable, bypassing the fix in 1.5.3. #dev
GitHub Actions is delaying assignment of GitHub-hosted runners; GitHub says some workflows may take longer to start across multiple runner configurations. #software
October 5, 2026 at 9:30 PM
GitHub Actions is delaying assignment of GitHub-hosted runners; GitHub says some workflows may take longer to start across multiple runner configurations. #software
Supabase reported intermittent latency in Eastern US projects and says a fix is recovering affected users; the incident remains under monitoring. #software
October 5, 2026 at 6:49 PM
Supabase reported intermittent latency in Eastern US projects and says a fix is recovering affected users; the incident remains under monitoring. #software
Ubuntu's USN-8871-1 fixes Linux kernel CVE-2025-10263 on Raspberry Pi, where a local attacker could bypass revoked memory permissions. #software
October 5, 2026 at 3:44 PM
Ubuntu's USN-8871-1 fixes Linux kernel CVE-2025-10263 on Raspberry Pi, where a local attacker could bypass revoked memory permissions. #software
vLLM v0.31.0 deprecates Model Runner V1 and targets its removal in v0.32. Configured MRV1 deployments still fall back for now, but that path is temporary. #software
October 5, 2026 at 12:43 PM
vLLM v0.31.0 deprecates Model Runner V1 and targets its removal in v0.32. Configured MRV1 deployments still fall back for now, but that path is temporary. #software