The Platform Radar blog

One engineering story at a time, read from its primary source.

RSS feed

Earlier

  1. Python security releases for 3.11 to 3.15: rebuild now?

    Python 3.11 to 3.15 got expedited fixes for compromised eMudhra CA keys and a tarfile bypass related to CVE-2026-7774. Upgrade is recommended.

  2. Static CI secrets after Trivy: what to rotate on Vercel

    Compromised Trivy, trivy-action, setup-trivy and litellm 1.82.7 and 1.82.8 releases hunted CI secrets during short windows in March 2026. Rotate static Vercel CI credentials.

  3. ECS Gateway vs ALB: Should You Replace Your ECS Ingress?

    ECS Gateway automates shared ALB ingress for ECS. It suits HTTPS-only services, and its immutable settings are the main migration risk.

  4. PHP critical RCE: where is PHP running in your fleet?

    Two critical PHP RCE flaws were fixed on October 21, 2026. The hard part is finding PHP in images, appliances and unsupported versions.