Daily Dev Stack Audit: Security Sweep Hits Postgres, Redis, RabbitMQ & More

Executive Summary

• Coordinated security wave across the data layer. PostgreSQL shipped a cumulative release fixing 28 CVEs (including two CVSS 8.8 buffer overflows and a SQL-injection-via-EXTRACT bug); Redis 8.10.1 patched nine distinct memory-safety issues including a heap out-of-bounds write in CMSketch RDB loading; MongoDB disclosed a CVSS 9.0 critical authentication flaw in intra-cluster connections (CVE-2026-18691).
• RabbitMQ published ten advisories in one day, headlined by a CVSS 8.2 pre-authentication memory-exhaustion bug in Web STOMP and a chained admin-to-RCE flaw via Erlang distribution reflection.
• Framework-level auth bypasses landed in Fastify, Drizzle ORM, Django, Node.js, and the Auth.js/NextAuth ecosystem — several are trivially exploitable and warrant same-day patching.
• Next.js confirmed a scheduled critical-severity security release for August 26, 2026 (patched versions 16.3.3 and 15.5.24), even as 16.3 shipped major Turbopack memory and build-cache wins.
• Breaking-change season continues: Better Auth 1.7 ships 16 breaking changes around OAuth/MCP/SCIM; BullMQ 6.0 introduces a pluggable storage backend and drops the legacy repeatable-jobs API; Prisma 8 and Drizzle ORM 1.0 both remain in release-candidate churn with schema and typing changes.
• New capability launches: Django 6.1's model "fetch modes" collapse most N+1 query patterns automatically; DuckDB previewed a from-scratch v2.0 with a new SQL parser and storage format; Cloudflare shipped Access-protected Workers; Kubernetes 1.37 is in RC ahead of an August 26 release.

Containers, Edge & Infrastructure

Docker

Docker Engine reached v29.7.2 (Aug 5, 2026), a stabilization release fixing image pulls with absolute hardlink targets and a docker service create panic on duplicate env vars, with BuildKit bumped to v0.32.2. Docker Compose v5.4.0 (Aug 3) introduces a new reconciliation engine that models volume/network lifecycle changes in the execution plan so docker compose apply only recreates resources that actually need it:

# Compose now diffs volume/network state before recreating
docker compose apply --dry-run

Docker Desktop v4.87.0 (Aug 17) fixed an in-app updater bug on custom install drives. Separately, CVE-2026-8936 (CVSS 8.2, High) describes uncontrolled recursion in the grpcfuse kernel module — a container writing deeply nested directories to a bind mount can panic the Desktop VM — fixed in 4.76.0 and later.

Sources: Docker Engine 29 release notes · Compose v5.4.0 · Desktop release notes

Cloudflare

Workers can now have Cloudflare Access attached directly, either per-Worker or account-wide as private-by-default, with a new ctx.access.getIdentity() runtime API replacing manual JWT validation (changelog). Workers AI and AI Gateway unified billing and model access on Aug 7, and R2 Data Catalog billing went live for non-enterprise accounts on Aug 3 (R2 changelog). Breaking change to track: legacy Workers KV REST routes (/accounts/{id}/workers/namespaces/*) are deprecated and must migrate to /accounts/{id}/storage/kv/namespaces/* before Oct 15, 2026 (deprecation notice).

Vercel

The Vercel changelog (Aug 21) adds terminal-driven DNS/domain/project management to the CLI, ships vercel vcr for managing the Vercel Container Registry against Docker/Podman/Buildah tooling, and adds Bun 1.4 support to Vercel Functions. Deployment Storage moves to metered billing at $0.10/GB/month for new Pro and Enterprise teams.

Kubernetes & Podman

Kubernetes v1.36.4 landed Aug 20, with v1.37.0 in release-candidate ahead of a planned Aug 26 GA (release info). Podman v6.1.0 adds podman volume rename, podman machine restart, and retry flags for podman manifest push. CVE-2026-19730 (Low/Medium) notes that podman quadlet install --replace can leave stale, security-relevant directives (like AddCapability) behind when the replacement unit file is shorter than the original.

Cloud Platforms

AWS's weekly roundups highlight new EC2 Application Status Checks, an IAM Role Manager, and Valkey 9.1 support in ElastiCache (Aug 17 roundup). Railway shipped an official ChatGPT plugin for conversational infra management and previewed "dev.new," a prompt-to-production app builder (changelog). Render cut median build times roughly 40% by moving builds to faster nodes and added managed OIDC auth for Anthropic and OpenAI API calls, removing the need for long-lived API keys (changelog).

Identity & Authentication (IAM)

Keycloak

26.7.2 (Aug 19) is a security release fixing eight CVEs, including an admin-endpoint secret leak (CVE-2026-17048, rotated client secrets exposed via the Admin REST API), a fine-grained-permissions bypass (CVE-2026-14613), and an unauthenticated account-takeover path through the reset-credentials flow (CVE-2026-18963). Full details: Keycloak 26.7.2 announcement.

Authentik

2026.8.0 (Aug 18) adds Privileged Access Management with approval workflows, delegated "agent accounts," and OpenID Certified™ status for both the provider and logout profiles. Two breaking changes: hash_password no longer accepts a password as a CLI argument, and the duplicate-device-prevention option was removed from WebAuthn setup (release docs).

Clerk & Auth0

Clerk shipped Custom OAuth Scopes and Client ID Metadata Documents (CIMD) for credential-less public OAuth clients this week (changelog). Its most significant recent security item remains GHSA-w24r-5266-9c3c (High) — combining organization, billing, and reverification checks in a single auth.protect() call could evaluate incorrectly as authorized. Auth0's Flexible Password Policy reached GA with a 15-character default minimum, and Universal Login now applies the same custom signup fields to social/enterprise connections that database connections already had (changelog).

Better Auth / Auth.js (NextAuth)

Better Auth 1.7.0/1.7.1 (Aug 18) is a major release with 16 breaking changes: account identity is now scoped by (issuer, accountId) instead of accountId alone, MCP support moved to a standalone @better-auth/mcp package, and Microsoft Entra identification switched from the sub claim to the stable oid claim. It adds OAuth Device Authorization Grant (RFC 8628) and DPoP sender-constrained tokens (RFC 9449):

// Better Auth 1.7 — DPoP-bound token config
export const auth = betterAuth({
  advanced: {
    database: { joins: true }, // replaces experimental.joins
  },
  plugins: [dpop(), deviceAuthorization()],
});

Auth.js/NextAuth's most recent coordinated advisory (Jul 20) fixed four issues, headlined by GHSA-7rqj-j65f-68wh — the default email normalizer validated addresses *before* Unicode normalization, allowing a homoglyph @ bypass in magic-link sign-in. Fixed in [email protected] and @auth/[email protected].

Meta-Frameworks & Core Web Standards

Next.js & React

Next.js 16.3.2 (Aug 21) is a Turbopack-focused patch release, but the headline is a scheduled critical-severity security release for Aug 26, 2026, shipping as 16.3.3 and 15.5.24 (advisory) — teams should plan an upgrade window now. The underlying 16.3.0 feature release cut Turbopack dev-server memory up to 90% and added a persistent build cache (turbopackFileSystemCache) for up to 5.5x faster repeat CI builds:

// next.config.ts — new Instant Navigations opt-in
export default {
  experimental: { cacheComponents: true, partialPrefetching: true },
};

React's latest is 19.2.8 (Jul 21), a Server Components decoding-performance patch; a 19.3 canary is active but not yet stable. Full notes: Next.js 16.3 blog post.

Nuxt & Vue.js

Nuxt 4.5.2 (Aug 5) focuses on build performance — skipping unchanged file rewrites and lazy-loading imports — plus island-rendering fixes. Vue 3.5.41 shipped the same day with vnode-lifecycle and hydration fixes. The bigger story is Vue 3.6, now at release candidate 3.6.0-rc.5, headlined by Vapor Mode: an opt-in compilation mode targeting Svelte/Solid-level bundle size, built on a new @vue/reactivity core using alien-signals. Vapor Mode currently has no Options API support and no v-memo. Sources: Nuxt releases · Vue releases.

SvelteKit & Svelte

SvelteKit 2.70.3 (Aug 18) avoids eagerly reading $app/state dependencies during module init; 2.70.2 patched a quadratic-backtracking issue in Accept header parsing. Svelte 5.56.10 (Aug 20) is a 21-fix patch release with no breaking changes. SvelteKit 3 is previewing under the next npm tag (3.0.0-next.25).

Astro

Astro 7.2.4 (Aug 19) fixes build hangs on malformed images and a base-path-stripping boundary bug. The underlying 7.2 minor (Aug 6) introduced experimental incremental static builds, letting Astro skip regenerating prerendered pages whose code and data haven't changed. Note: 7.2.3 removed the undocumented app.pipeline/AppPipeline export in favor of app.getLogger() — a breaking change for custom adapters. Source: Astro 7.2 announcement.

Backend Frameworks & Runtimes

NestJS & Node.js

NestJS 11.2.1 (Aug 14) fixes an early-return issue in SSE abort handling; 11.2.0 added HTTP QUERY method support (RFC 10008) and bumped the Fastify adapter to v5.12.0. Node.js shipped a coordinated security release fixing 11 CVEs across the 22.x/24.x/26.x lines (Jul 29), three rated High: an HTTP/2 header-retention bypass of maxSessionMemory (CVE-2026-56846), an HTTP/2 use-after-free (CVE-2026-56848), and a Permission Model path-matching flaw that can over-grant filesystem access (CVE-2026-58043). Full advisory: Node.js July 2026 security releases.

Fastify & Express

Fastify 5.8.5 patches GHSA-247c-9743-5963 (CVSS 7.5, High) — prepending a single leading space to the Content-Type header caused schema validation to silently skip while the body parser still parsed the payload, letting unvalidated data through:

# Vulnerable pattern (fixed in fastify >=5.8.5)
curl -H "Content-Type:  application/json" -d '{"malicious":true}' https://api.example.com

Express's routing dependency path-to-regexp carried three ReDoS/DoS advisories fixed by upgrading to >=8.4.0 (Express security bulletin); the framework itself sits at v5.2.1 after reverting a breaking query-parser change from 5.2.0.

ElysiaJS & Hono

ElysiaJS 1.4.29 optimizes multipart form parsing; 1.4.27 fixed a cookie prototype-pollution vulnerability during parsing. Hono 4.13.3 (Aug 19) fixed CORS preflight Vary header handling and an IPv6 embedded-IPv4 truncation bug; the 4.13.0 minor added first-class HTTP QUERY method support and a rewritten RegExpRouter for ~20% faster route registration.

Python & PHP Stacks

FastAPI 0.141.1 (Jul 29) fixed background-task and header propagation inside app.frontend(). Django 6.1 (Aug 5) ships model fetch modes — configurable on-demand field fetching that collapses most N+1 patterns to roughly two queries without manual prefetch_related() lists — alongside a same-week security release (Django 6.0.8/5.2.17) fixing four CVEs, including a High-severity SSRF/file-write flaw in spatial lookups (CVE-2026-15307). Laravel (framework v13.26.1, Aug 18) added Route::metadata() for structured route metadata and native Postgres transaction-pooler support for PgBouncer/RDS Proxy/Neon. Sources: Django 6.1 announcement · Django security releases.

UI Systems, Styling & Motion

shadcn/ui, Radix UI & Tailwind CSS

shadcn's CLI hit 4.19.0 (Aug 21) with a new "Questionnaire" multi-step form component shipped simultaneously across Base UI, React Aria, and Radix bases (changelog). The unified radix-ui package sits at 1.6.7, with recent fixes to Dialog ARIA references, Slider thumb-drag commits, and new per-primitive tree-shaking via @__PURE__ annotations. Tailwind CSS 4.3.3 added --watch --poll[=ms] for unreliable filesystems and fixed arbitrary hex-color matching against theme colors; an unreleased @tailwindcss/turbopack package is in progress for native Next.js/Turbopack integration.

Material UI & Motion

MUI 9.3.1 (Aug 6) fixed exit-transition hangs and restored missing codemod transforms in @mui/codemod. Motion 13.1.1 (Aug 18) hardened SSR safety by guarding window access, following the 13.0.0 breaking change that removed the bundled @emotion/is-prop-valid dependency — projects filtering custom DOM props must now pass an explicit isValidProp function via <MotionConfig>.

Databases, Caching & Vector Search

PostgreSQL & pgvector

PostgreSQL's Aug 13 cumulative release (18.6, 17.11, 16.15, 15.19, 14.24, plus 19 Beta 3) fixes 28 CVEs and 110+ bugs — including two CVSS 8.8 heap buffer overflows (regexp, to_char), a SQL-injection path via EXTRACT in expression deparse (CVE-2026-15741), and a superuser-arbitrary-code-execution flaw in psql \unrestrict (CVE-2026-18408). Operators should also check pg_class.reltuples on GIN indexes after a parallel-build regression wrote Infinity/NaN values that block autovacuum. Full notes: PostgreSQL release announcement. pgvector 0.8.6 fixed a 32-bit IVFFlat buffer overflow and tightened sparsevec cast validation.

Redis & MongoDB

Redis 8.10.1 (Aug 17, flagged Security) bundles nine memory-safety fixes in one release: a heap out-of-bounds write in CMSketch RDB loading, a Vector Sets use-after-free during concurrent VSIM/VREM, and a TLS auth bypass via NUL-byte injection in a client certificate's Common Name. Treat this as a priority patch — release notes. MongoDB disclosed CVE-2026-18691 (CVSS 9.0, Critical): improper authentication on intra-cluster/replica-set connections lets a network-adjacent attacker intercept credentials and authenticate as an internal superuser. Fixed in Server 7.0.40, 8.0.29, 8.2.13, and 8.3.8.

ClickHouse & DuckDB

ClickHouse's 26.7 line (stable point release v26.7.5.10, Aug 21) added EXPLAIN ANALYZE with real execution metrics and made a breaking change to S3 credential resolution — user SQL no longer auto-resolves server credentials by default. DuckDB 1.5.4 shipped security hardening across Parquet decompression paths, while a DuckDB v2.0 preview (Aug 17) previewed a from-scratch rewrite: a new PEG-based SQL parser, a new storage format with lazy metadata loading, and async I/O for remote storage — targeted for production readiness this fall. Source: DuckDB 2.0 highlights.

Database Tools, ORMs & BaaS

Prisma & Drizzle

Prisma 8 remains in release candidate (rc.7, Aug 20) with breaking changes: the prisma-next binary is retired in favor of a unified CLI, and default aggregates (count/sum/avg) now return plain JS numbers instead of bigint. Drizzle ORM sits at stable 0.45.2 while v1.0.0-rc.5 iterates; worth re-checking your pin against CVE-2026-39356 (CVSS 7.5, High) — a SQL injection via improperly escaped identifiers in sql.identifier(), fixed in 0.45.2 and 1.0.0-beta.20.

Supabase & Firebase

Supabase's self-hosted stack switched its default API gateway from Kong to Envoy the week of Aug 9 — projects relying on Kong's HTTPS listener or custom kong.yml need to opt back in explicitly. The CLI (2.115.0, Aug 18) now defaults to the bundled pg-delta schema-diff engine and fails supabase test db runs that find zero tests, rather than passing silently. Firebase JS SDK 12.18.0 (Aug 19) removed deprecated Imagen APIs ahead of that model family's shutdown, pointing developers to the Gemini Image ("Nano Banana") models instead.

Background Jobs, Messaging & Task Queues

BullMQ

BullMQ 6.2.0 (Aug 21) adds a generic ProgressType for typed job progress. The bigger shift was 6.0.0 (Jul 30): a new pluggable IQueueBackend abstraction supporting Postgres alongside Redis, removal of the legacy repeatable-jobs API in favor of Job Schedulers, and Queue#client replaced by getBackend().

RabbitMQ & Apache Kafka

RabbitMQ 4.3.5 (Aug 17) is the fix vehicle for ten security advisories published the same day. The standout is GHSA-cfqc-c682-93mm (CVSS 8.2, High): an unauthenticated client sending many small, highly-compressed Web STOMP frames can force ~900x memory amplification and exhaust broker memory, bypassing the 16MB heap limit since decompression happens off-heap. A second, chained advisory (GHSA-3526-xvv4-q9mr) lets an authenticated admin escalate to remote code execution through reflected Erlang-distribution authentication. Apache Kafka's latest is 4.3.1 (Jun 25), fixing a Kafka Streams RocksDB native memory leak; separately, CVE-2026-35554 (CVSS 8.7, High) describes a producer-client buffer-pool race condition that can corrupt or misroute messages across topics when a batch expires mid-flight — fixed in kafka-clients 3.9.2, 4.0.2, and 4.1.2+.

Temporal

Temporal Server v1.31.2 (Jul 8) cherry-picked the fix for CVE-2026-5724 (CVSS 6.3, Moderate) — the streaming AdminService/StreamWorkflowReplicationMessages endpoint's interceptor chain omitted authorization checks, letting network-adjacent attackers open a replication stream without credentials. Self-hosted deployments only; Temporal Cloud was not affected. Operators enabling authorization alongside replication should set system.disableStreamingAuthorizer=true if upgrading breaks existing replication connections.

What to Patch First

If you only action one thing from today's audit, prioritize in this order: RabbitMQ 4.3.5 (pre-auth memory exhaustion, trivially exploitable), MongoDB 8.0.29/8.2.13/8.3.8 (CVSS 9.0 intra-cluster auth bypass), Redis 8.10.1 (nine bundled memory-safety CVEs), PostgreSQL's Aug 13 cumulative release (28 CVEs), and Node.js 22.23.2/24.18.1/26.5.1 (HTTP/2 and Permission Model flaws) — then block out time on Aug 26 for the Next.js critical-severity release.