Google Expands BigQuery & Alibaba Releases Open Code Review & Multiple Security CVEs

Google extends BigQuery's reach with new database and enterprise connectors while Alibaba open-sources its AI-powered code review tool, and critical security vulnerabilities emerge across multiple platforms.

Frameworks & Libraries

Astro advances Islands Architecture with experimental collection storage. Version 7.1.0 introduces configurable data storage options—"single-file" (default) or "chunked" mode—enabling developers to split content collections across multiple files in .astro/data-store/ with customizable chunk sizes. This addresses deployment constraints on platforms with asset size limits. Read more
Sky v0.19 compiles Elm-style functional code to typed Go, now rewritten in Rust for faster incremental builds and predictable memory usage. The compiler enforces exhaustive pattern matching and eliminates runtime exceptions; v0.19 introduces a breaking change to app configuration via typed builders instead of row-open records. Read more

Languages & Runtimes

Python 3.14, Node.js 24/26, Bun 1.3, Deno 2.9, and Go 1.26 are now supported on HYEHOST bot hosting with selectable versions at deployment time, allowing developers to match production environments and switch runtimes without losing persistent project files. Read more
Perl 5.45.1 and earlier contain out-of-bounds heap reads/writes in regex matching (CVE-2026-15534) due to integer overflow in the superlinear cache—a 286MB+ subject with 15+ WHILEM nodes triggers undetected overflow, corrupting the 32-bit cache count and exposing memory beyond allocation. Read more

DevOps & Cloud

Google BigQuery Transfer Service adds Microsoft SQL Server (preview), PostgreSQL, MySQL (GA), and a Snowflake migration connector (GA) with incremental transfer support. ServiceNow, Salesforce, and Oracle now support native incremental updates, reducing refresh times for CRM and finance pipelines. Read more
Nutanix Database Service (NDB) is now available on Google Cloud Platform, supporting popular open-source databases and AI workloads, expanding database deployment options beyond traditional cloud offerings. Read more
Google Cloud API Gateway enters public preview with model routing, enabling developers to dynamically route traffic to Gemini, Claude, or OpenAI models, simplifying endpoint management for AI applications. Read more

Security

CVE-2026-19350 (Dolibarr ERP ≤23.0.3): Missing authorization in TakePOS Module's htdocs/takepos/invoice.php allows remote exploitation. Patch: 8992ce8704da947b6abe7b65a6fe59aed736bb81. Read more
CVE-2026-19358 (3CORESec Trapdoor ≤1.2.2): Improper access control in the DefaultFunction (CVSS 4.0) permits remote exploitation. Vendor contacted early. Read more
CVE-2026-19383 (SaiAdmin ≤5.0.1): Unrestricted file upload in Plugin Upload Endpoint (/app/saipackage/install/upload) allows remote exploitation; exploit publicly disclosed. Read more
CVE-2026-19364 (Hospital Management System 1.0): SQL injection via delid parameter in /viewdoctorconsultancycharge.php (CVSS 3.1 7.5) enables remote exploitation with user authentication. Read more
CVE-2026-19343 (Task Management System 1.0): SQL injection in /admin/AdminLogin.php via email/password parameters (CVSS 3.1 7.5) permits unauthenticated remote exploitation with published PoC. Read more
CVE-2026-19336 (Pimzino spec-workflow-mcp ≤2.2.6): Path traversal in ApprovalStorage.createApproval() via categoryName manipulation requires local access. Fixed in v2.2.7 (patch 9c7a7839e690bb4543f0e7481b5740d23808e5fe). Read more
CVE-2026-19382 (Almico SpeedFan 4.52): Memory leak in MSR Index Handler's KiSystemCall64 function (CVSS 3.1 2.3) requires local access; vendor unresponsive. Read more

Open Source

Alibaba's Open Code Review reaches open source—an AI-powered code review CLI tool battle-tested across Alibaba serving tens of thousands of developers and identifying millions of defects. Achieves 9x better token efficiency and higher precision than general-purpose agents like Claude Code while trading recall for noise reduction. Benchmark: 50 popular repos, 200 real PRs, 10 languages, 80+ senior engineers validating. Read more
gstack by Garry Tan transforms Claude Code into a virtual engineering team via 23 specialist agents and 8 power tools—CEO product rethinking, eng manager architecture, designer review, code reviewer, QA lead with real browser, security officer (OWASP/STRIDE), and release engineer—all as Markdown slash commands, free MIT license. Read more

Dev Tools & IDEs

Tencent Cloud CodeBuddy plugin for JetBrains IDEs brings Tencent's developer productivity tool to IntelliJ, providing AI-assisted coding capabilities. Read more