Blog
Geliştirme, tasarım ve sektör hakkında yazıyoruz.
BlockStrap (CVE-2026-103849, CVSS 10.0) in the Magento and Adobe Commerce email template engine allows unauthenticated code execution. Adobe rated it Priority 2, Sansec says not to wait. Who is affected and how to apply the fixes properly.
On October 21, 2026 GitLab fixed a critical vulnerability, CVE-2026-110264 (CVSS 10.0), in its regular expression compiler: every self-managed version from 7.0 onwards is affected. Which versions to upgrade to, where to expect downtime and how to spot an attack.
On October 21, 2026 PHP fixed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2): unauthenticated code execution on any PHP server. Who is affected, which versions to update to and what to do if you cannot update right away.
On October 6, 2026 Next.js 16.4 was released: Cache Components are now recommended for every app and enabled in new projects, React 19.3 is included, and Turbopack produces smaller bundles.
On September 23, 2026 NestJS 12.1 was released: built-in adapter-agnostic cookies, CSRF protection and security headers, file uploads in Fastify and multiple global prefixes.
On August 27, 2026 NestJS 12 was released — the biggest framework update in years: ESM core packages, Standard Schema validation (Zod, Valibot, ArkType) and a new toolchain.
On August 14, 2026 NestJS 11.2 was released: support for the HTTP QUERY method, an abort signal for Server-Sent Events, Fastify 5.12 and fixes for lazy modules and middleware.
On August 12, 2026 Flutter 3.47 shipped with Dart 3.13: Material and Cupertino became standalone packages, the minimums went up to iOS 15 and macOS 12, and Impeller became the default renderer on desktop.
On August 11, 2026 React Native 0.87 was released: the Strict TypeScript API by default, Metro building source maps twice as fast, experimental Swift Package Manager on iOS and Android Gradle Plugin 9 support.
On August 3, 2026 Next.js 16.3 was released — the biggest update since 16.0: the dev server uses far less memory, repeat builds reuse unchanged artifacts from cache, and Instant Navigations bring SPA-like responsiveness.
On June 11, 2026 React Native 0.86 was released: edge-to-edge fixes on Android 15+, light and dark mode emulation in DevTools and a move to the react GitHub organization. There are no user-facing breaking changes.
On May 18, 2026 Flutter 3.44 shipped with Dart 3.12: Swift Package Manager replaced CocoaPods for iOS and macOS, Android got Hybrid Composition++, and Canonical now leads desktop development.
On May 12, 2026 Adobe released Magento Open Source and Adobe Commerce 2.4.9: PHP 8.5, Symfony 7.4 LTS, OpenSearch 3, 580 fixes and support until May 2029. Here is what changed and how to upgrade without surprises.