Dev Stack Radar: Django 6.1, Redis CVE & Docker Compose

Every day the stack you ship on moves. This is the August 8, 2026 snapshot: what shipped, what broke, and what needs a patch across containers, identity, meta-frameworks, backend runtimes, UI systems, databases, and the messaging layer that glues it all together. Verified against official changelogs, GitHub release tags, and security advisories — no rumors, no unverified CVEs.

Executive Summary

• Django 6.1 ships alongside a same-week security release (Django 6.0.8 / 5.2.17) patching a High-severity SSRF/arbitrary-file-write flaw in spatial lookups (CVE-2026-15307) plus three lower-severity issues.
• Redis 8.10.0 reaches GA with compact hash encoding and a native BACKUP command, while the prior 8.8.1/8.6.5/etc. line closed an authenticated-RCE flaw in RedisBloom's TDigest loader (CVE-2026-25589, CVSS 7.7).
• Keycloak 26.7.1 is a security patch closing five CVEs, including an OIDC unsigned-claims bypass and two Fine-Grained Admin Permission (FGAP v2) authorization bypasses.
• Docker Compose v5.4.0 reworks the resource-reconciliation plan to stop unnecessary volume/network recreation; Docker Desktop 4.85.0 ships Gordon AI Agent v1.115.0 and a Linux bind-mount kernel-panic fix.
• A cross-vendor class of agentic-tool-call-bypass flaws hit AWS Bedrock AgentCore (CVE-2026-18830), Google ADK, and Vercel's AI SDK harnesses (CVE-2026-64650 / CVE-2026-64651) — all let a caller smuggle a tool-use block past model authorization.
• BullMQ v6 landed a pluggable IQueueBackend (Redis + Postgres) with a full week of near-daily point releases across its TypeScript, Rust, Python, PHP, and new .NET ports.
• Nuxt's most recent news is a 7-issue security release (4.5.1/3.21.10) including a critical dev-only DevTools RCE and a high-severity server-island RCE — upgrade immediately if running cache/swr/isr route rules.
• Supabase switches self-hosted deployments to Envoy as the default API gateway (replacing Kong) effective the week of August 9 — a breaking change for custom kong.yml setups; Supabase Cloud is unaffected.
• Temporal Cloud launched Projects for organizing namespaces, and pushed Serverless Workers for AWS Lambda to Public Preview and GCP Cloud Run to Pre-Release.

Containers, Edge & Infrastructure

Docker

Docker Compose v5.4.0 (Aug 3) introduces a new reconciliation workflow that models volume and network lifecycle changes directly in the execution plan, fixing cases where resources were recreated unnecessarily. It also preserves zero-replica services during hashing and bumps the internal Golang toolchain to 1.26.5 on Alpine 3.23.

Docker Desktop 4.85.0 (Aug 3) ships the Gordon AI Agent v1.115.0 with plan-mode fixes, resolves a Linux VM kernel panic tied to file-watcher/bind-mount interaction, and defaults Windows Microsoft Store installs to per-user mode. Note that docker sbom is now deprecated across the Engine/Desktop release notes in favor of docker scout sbom.

# Recommended replacement for the deprecated docker sbom command
docker scout sbom myimage:latest

Cloudflare

Workers AI and AI Gateway merged into a unified API surface and billing model (Aug 7): a single env.AI.run() call now covers Cloudflare-hosted and third-party models, with shared prepaid credits and higher rate limits (50 rpm vs 20 rpm) for frontier models billed through AI Gateway — no Workers Paid plan required.

• workerd runtime v1.20260807.1 is the current Workers build (Aug 7).
• Vectorize index capacity doubled to 20 million vectors per index (Aug 4).
• WAF managed rules updated for a Microsoft SharePoint RCE and a Rails vulnerability (Aug 4).
• R2 Data Catalog and R2 SQL now bill on metered usage, including $0.0025/GB for SQL scans (Aug 4).

Vercel

This week's changes lean toward Vercel's agent tooling: Vercel AI Gateway integration for Hermes Agent (Aug 7) with no token markup, a new Sandbox.fork() API for server-side sandbox copying, and public read-only Vercel Container Registry repositories (Aug 7).

On security: two flaws in Vercel's AI SDK harness packages — CVE-2026-64650 (@ai-sdk/harness-codex) and CVE-2026-64651 (@ai-sdk/harness-opencode), both CVSS 6.3 — were fixed in July by removing a trusted-process-path fallback that let sandboxed code invoke host tools without model authorization. They're part of a broader cross-vendor agent tool-call bypass disclosure covering AWS and Google as well.

Kubernetes & Podman

No new Kubernetes patch has landed in the last week; the next scheduled monthly cycle (1.36.3/1.35.7/1.34.10/1.33.14) targets August 11, 2026. Podman's confirmed latest stable is v6.0.0 (June 24) — a breaking release dropping BoltDB, Intel Mac, Windows 10, cgroups v1, iptables, CNI, and slirp4netns, plus a fix for CVE-2026-57231 (malformed image Env entries leaking host environment variables into containers). A v6.1.0-RC1 pre-release with podman volume rename and IPv6 rootless port-forwarding is circulating but its exact publish date could not be independently verified — confirm against the GitHub releases page before treating it as final.

Cloud Platforms: AWS, Railway, Render

AWS Bedrock AgentCore patched CVE-2026-18830 (CVSS 8.6, Aug 4): insufficient input validation in the managed InvokeHarness API let an authenticated caller place a tool-use block in the final message of a request, dispatching a tool without model oversight. AWS applied server-side validation automatically — no customer action required.

Render moved builds to faster CPU/disk nodes, cutting median build time roughly 40% (from ~38s to ~21s) across all runtimes (Aug 7). Railway had no verifiable official changelog entries for this window; third-party trackers mention Free-plan pricing changes, but they couldn't be confirmed against Railway's own site.

Identity & Authentication (IAM)

Keycloak

Keycloak 26.7.1 (Aug 5) is a security-focused patch fixing five CVEs: a JWE request-object bypass of requestObjectSignatureAlg that let unsigned claims through OIDC (CVE-2026-9793, CVSS 5.9); a privilege-escalation bug via hardcoded role-mapper injection in manage-clients (CVE-2026-4629); an Admin UI user-disclosure issue under FGAP v2 (CVE-2026-14209); and two further FGAP v2 authorization bypasses (CVE-2026-14614, CVE-2026-14615). It also closes a WebAuthn authenticator-attachment policy bypass. Upgrade promptly if you run Fine-Grained Admin Permissions.

Authentik

Authentik 2026.8.0 is in release-candidate stage (rc1–rc6 shipped Aug 3); current stable remains 2026.5.6. The 2026.5 line removed 17 packages to shrink attack surface and moved the worker's startup/health/metrics path to a Rust entrypoint, cutting per-worker memory by roughly 200MB. Authentik also moved to a 3-month release cadence, supporting the two most recent minor versions.

Clerk & Auth0

Clerk shipped Client ID Metadata Documents (CIMD, beta, Aug 6) letting public OAuth clients use HTTPS URLs as client identities, and Google Workspace Directory Sync for users/groups (Aug 5). Auth0 put Custom Token Exchange — Session Delegation into Early Access (Aug 7), letting an authorized actor establish a session as another user with full audit trails, and moved Google Workspace Directory Sync for Groups to General Availability (Aug 6).

Better Auth / Auth.js

Better Auth shipped both v1.7.0-rc.4 and v1.6.26 this week (Aug 4–5), adding RFC 8628 OAuth device-authorization grant support and aligning MCP authorization to the 2026-07-28 spec. One migration note worth flagging: Microsoft/microsoftEntraId accounts are now keyed by the stable oid claim instead of sub, which requires a database migration before upgrading.

# Better Auth: run the account-linking migration before upgrading past v1.6.26
# if you use the microsoftEntraId provider
npx @better-auth/cli migrate

Auth.js/NextAuth had no new dated release this week; v5 continues to ship as next-auth@beta under Better Auth's stewardship, with Better Auth recommended for new projects.

Meta-Frameworks & Core Web Standards

Next.js & React

Note on dating: one source dates the Next.js 16.3 release (Instant Navigations devtool, Turbopack dev-memory cut up to 90% via disk caching, up to 5.5x faster repeat CI builds) to August 3, while another places the same release in June — treat the exact date as unconfirmed and check the linked release notes directly. React itself had no release in the past week; the latest patches remain 19.2.8/19.1.9/19.0.8 from July 21, focused on React Server Components decoding performance.

Nuxt & Vue.js

Nuxt's most recent shipped code is a security release (4.5.1 / 3.21.10, plus devtools 3.3.1) fixing seven issues — most notably a critical dev-only RCE in Nuxt DevTools via unauthenticated Vite HMR RPC, and a high-severity server-side RCE reachable when vue.runtimeCompiler is enabled. If you use cache/swr/isr route rules, purge CDN/edge caches after upgrading.

npm install nuxt@^4.5.1
# or on the 3.x line
npm install nuxt@^3.21.10

Vue.js 3.5.41 is the latest stable (Aug 5); 3.6.0-rc.2 continues previewing "Vapor Mode," an optional SFC compilation mode aimed at smaller baseline bundles and faster runtime.

SvelteKit, Svelte & Astro

SvelteKit 3 is shipping early @next previews (13 builds through July) introducing $app/manifest and $app/service-worker modules and built-in shallow routing via goto. On the stable line, remote forms gained a submitted property. Astro 7.2 (Aug 6) adds experimental Incremental Static Builds — skipping regeneration of prerendered pages whose code/data haven't changed — plus a session: false opt-out to strip session runtime from SSR bundles.

Backend Frameworks & Runtimes

Node.js ecosystem: NestJS, Fastify, Express, Hono, ElysiaJS

Node.js itself had its most recent security release on July 29, fixing 11 CVEs across the 22.x/24.x/26.x lines — three High severity, including an HTTP/2 header memory-limit bypass (CVE-2026-56846) and an HTTP/2 use-after-free (CVE-2026-56848). Update to ≥22.23.2, 24.18.1, or 26.5.1 if you haven't already.

• NestJS sits at v11.1.28 (Jul 8); a v12 major with a full CJS→ESM migration and a Jest→Vitest/ESLint→oxlint/Webpack→Rspack toolchain swap is in development for roughly Q3 2026.
• Fastify v5.11.2 (~Aug 3–5) is a patch on top of v5.11.0/5.11.1, which added HTTP QUERY method support and stricter RFC 9110 content-type parsing.
• Hono v4.13.1 (~Aug 7) fixes trie-router pattern matching and ETag middleware skipping unsafe methods; v4.13.0 delivered up to 1.25x faster routing on common paths.
• Express had no release activity in the window; ElysiaJS's latest changelog entry is v1.4.29 (Jun 17), with a 2.0 major still in beta.

Python & PHP: FastAPI, Django, Laravel

FastAPI 0.141.1 (Jul 29) fixed background-tasks/header support in app.frontend(). The headline this week is Django 6.1 (Aug 5), adding model field fetch-mode configuration and database-level ForeignKey.on_delete options — released alongside a same-week security update (6.0.8 / 5.2.17) fixing CVE-2026-15307 (High — SSRF/arbitrary file-write via spatial lookups accepting str/dict raster values), plus three lower-severity XSS/DoS issues.

# CVE-2026-15307 mitigation: upgrade before accepting untrusted raster input
# in GIS spatial lookups
pip install --upgrade "Django>=6.0.8,<6.1"  # or Django==5.2.17 on the LTS line

Laravel's framework tag sits at v13.19.0 (~Jul 7); the most recent documented changes are route metadata support via ->metadata(), Postgres transaction-pooler support (PgBouncer/RDS Proxy/Neon), and MCP client tool/resource/prompt support in laravel/mcp.

UI Systems, Styling & Motion

shadcn/ui & Radix UI

shadcn/ui added a new Questionnaire component in August — a multi-step question-flow block for agent-clarification prompts, onboarding, and intake forms, shipping across Base UI, React Aria, and Radix variants. Base UI became the default component library in July (Radix remains supported). Radix primitives (~v1.6.7) fixed broken ARIA references in Dialog, a Slider onValueCommit bug on thumb-crossing drags, and improved tree-shaking via per-primitive subpath entry points.

Tailwind CSS & Material UI

Tailwind CSS v4.3.3 (Jul 16) added --watch --poll support for unreliable filesystem events; a @tailwindcss/turbopack package for Next.js is in progress but unreleased. Material UI v9.3.1 (Aug 6) fixed exit transitions getting stuck, following v9.3.0's roving-tabindex keyboard navigation for Toggle Button Group.

Motion (Framer Motion)

Motion v13.0.0 (Aug 5) is a breaking major release: it removes the optional @emotion/is-prop-valid dependency, so DOM prop filtering now requires explicit configuration.

import { MotionConfig } from "motion/react"
import isPropValid from "@emotion/is-prop-valid"

// Required after Motion v13 to restore automatic invalid-prop filtering
export function App({ children }) {
  return <MotionConfig isValidProp={isPropValid}>{children}</MotionConfig>
}

Databases, Caching & Vector Search

PostgreSQL & pgvector

PostgreSQL 19 Beta 2 (Jul 16) is open for community testing; no minor/patch release has shipped in the last week. pgvector v0.8.6 (Jul 29) fixed a 32-bit buffer overflow in IVFFlat index builds and an incorrect array→sparsevec cast that didn't limit non-zero elements.

Redis

Redis 8.10.0 reached GA (Jul 29) with compact hash encoding, a native BACKUP command for multi-part AOF-based restore, and new commands including HIMPORT and SUNIONCARD. Separately, Redis 8.8.1 / 8.6.5 / 8.4.5 and matching patches on the 7.x/6.2 lines (Jul 23) closed CVE-2026-25589 (CVSS 7.7): an out-of-bounds write in the RedisBloom TDigest RDB/RESTORE loader that could lead to authenticated RCE via a crafted payload. If upgrading isn't immediate, restrict RESTORE via ACL and unload unused probabilistic modules.

# CVE-2026-25589 stop-gap: deny RESTORE for non-admin users until you can upgrade
ACL SETUSER myapp -restore

MongoDB

MongoDB's most notable recent news is a large CVE batch disclosed Jul 22 (just outside the ideal freshness window but still the latest): CVE-2026-13072 (CVSS 9.2, heap memory corruption via BSON in aggregation pipelines when "compute mode" is enabled) and CVE-2026-13059 (RBAC bypass, CVSS 8.6) are the highest-severity items. Fixed in Server 7.0.39 / 8.0.28 / 8.2.12 / 8.3.7.

ClickHouse & DuckDB

ClickHouse shipped a cluster of stable/LTS patches Aug 5–6 (26.7.3.19, 26.6.2.160, 26.3.17.110-lts, 25.8.29.51-lts); note the 25.8 LTS line reaches end of support Aug 29. DuckDB v1.5.5 (Jul 22) is a bugfix/security release closing several out-of-bounds reads in JSON path lookahead and dictionary-string decompression.

Database Tools, ORMs & BaaS

Prisma & Drizzle

Prisma 8 now supports authoring expression, partial, and unique indexes directly in the Prisma schema language (Aug 2), following CipherStash-powered searchable field-level encryption (Jul 30) and S3-compatible Object Store buckets for Prisma Postgres/Compute projects.

// Prisma 8: authoring a partial index directly in schema
model Order {
  id     Int    @id @default(autoincrement())
  status String
  total  Decimal

  @@index([total], where: { status: "pending" })
}

Drizzle ORM has nothing new to report this week beyond routine canary builds — latest on npm stays at 0.45.2, and the newest tagged pre-1.0 release remains 1.0.0-rc.4 from Jun 27.

Supabase & Firebase

Self-hosted Supabase switches its default API gateway from Kong to Envoy effective the week of Aug 9 — a breaking change if you rely on Kong's built-in :8443 HTTPS listener or a custom kong.yml; these don't carry over automatically. Supabase Cloud (hosted) is unaffected. Firebase CLI v15.25.1 (Jul 30) fixed emulator secret-params handling and service-account propagation delays during Cloud Functions deploys.

Background Jobs, Messaging & Task Queues

BullMQ

BullMQ v6 (Jul 30) introduced a pluggable IQueueBackend abstraction supporting both Redis and PostgreSQL, removing several Redis-internal-exposing APIs (Queue#client, Worker#blockingClient) — a breaking change if you're upgrading from v5. The week that followed shipped near-daily patches across BullMQ's multi-language monorepo: TypeScript v6.0.9 (Aug 7), Rust rs1.2.3 (Aug 7), Python py3.0.4 (Aug 5), PHP php2.0.1 (Aug 5, adding Predis v3 support), and an initial .NET port v1.0.0 (Aug 5).

RabbitMQ, Kafka & Temporal

Neither RabbitMQ (latest 4.3.4, Jul 23) nor Apache Kafka (latest 4.3.1, Jun 25, fixing a Kafka Streams RocksDB native memory leak) shipped a new release this week. Temporal Cloud was the most active: it launched Projects (Aug 7) as a new organizational layer for grouping namespaces and Nexus endpoints, moved Serverless Workers for GCP Cloud Run to Pre-Release (Aug 6), and put Serverless Workers for AWS Lambda into Public Preview (Aug 3).

What to Prioritize Today

• Patch immediately: Nuxt (critical DevTools RCE + high-severity server-island RCE), Redis (authenticated RCE via RedisBloom), Django (SSRF/arbitrary file-write), Keycloak (FGAP v2 bypasses).
• Plan for a breaking change: Supabase self-hosted (Envoy gateway swap, Aug 9), BullMQ v6 (Redis-internal API removal), Motion v13 (prop-filtering config), Better Auth (Microsoft Entra ID account-key migration).
• Worth adopting: Docker Compose v5.4's reconciliation fix, Next.js Instant Navigations, Prisma 8 schema-level partial indexes, Temporal's Lambda/Cloud Run serverless workers.