Deno Team Moves to Cloudflare: Runtime to Receive One Year of Support
The entire Deno team is moving to Cloudflare. The Deno runtime will receive fixes for another year, while Deno Deploy is expected to remain operational for six months.
Tag open source
Anthropic Launches OSS Scanner for Open-Source Security Checks
Anthropic introduced the free, opt-in OSS Scanner service, which is intended to periodically search for vulnerabilities in selected open-source projects.
Google DeepMind Releases Open Multimodal EmbeddingGemma 2 Model
Google DeepMind introduced the open EmbeddingGemma 2 model for creating shared vector representations of text, code, images, video, and audio.
Google Temporarily Pauses Some Reports in OSS VRP
As of October 1, 2026, Google is no longer accepting new product vulnerability reports through OSS VRP. The reason is an influx of invalid automated reports.
Google Releases AX v0.3.0, an Agent Task Orchestrator for Kubernetes
Google has published AX v0.3.0 in the google/ax repository. The open project provides a Kubernetes-native layer for orchestrating, isolating, and managing environments for agent tasks, but its API may still change substantially.
NVIDIA Expands CUDA-Q with Logical Layer for Fault-Tolerant Quantum Systems
NVIDIA introduced the open-source CUDA-Q Logical layer for modeling logical qubits, error correction and hardware parameters in quantum systems.
GeoNetwork Fixes Vulnerability Chain Enabling Remote Command Execution
The GeoNetwork project published security advisories for unauthenticated formatter uploads and a flaw in Saxon XSLT. Versions 4.4.12 and 4.2.17 also address CVE-2026-58400, rated CVSS 9.1.
Debian Adopts a Neutral Position on Generative AI Use
The Debian Project approved the Responsible Use of Generative AI resolution. It neither bans nor recommends generative AI in development; contributors remain responsible for their submissions.
AB 1856: California Legislature Approves Bill With Open-Source Software Exemption
The California Legislature approved AB 1856, which would exempt software distributed with rights to copy, redistribute, and modify it from age-signal requirements. The bill is not yet law.
Australia Charges Two Men Over TeamPCP Software Supply Chain Attacks
The Australian Federal Police and Western Australia Police Force have charged two men as part of an investigation into the TeamPCP campaign. U.S. authorities have also unsealed an indictment against Ruben Ian Thomson.