DirtyClone, tracked as CVE-2026-43503, is a Linux kernel vulnerability that allows any local user to gain root privileges.
JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
SkiaSharp 4.148.0 marks the first stable release in the SkiaSharp v4 line. The project is now co-maintained by Microsoft's .NET team and Uno Platform, reflecting a broader open-source collaboration.
If you're considering PuppeteerSharp for PDF generation, here's the version of the story that doesn't show up in the "getting started" docs.