GoKawiil
Tech News
Plex is urging all users to immediately update Plex Media Server to version 1.43.3 and Plex Desktop to version 1.115.0, both released earlier this year, to fix multiple unspecified security vulnerabilities. The company emailed affected customers directly and said CVE identifiers have been requested but not yet published, though the flaws are known to impact Media Server v1.43.2 and earlier.
The curl project explains that after becoming a CVE Numbering Authority (CNA) years ago, it now independently issues its own CVE identifiers for security flaws in its codebase, having assigned 57 so far. The maintainers describe a rigorous assessment process that grades each report as LOW, MEDIUM, HIGH, or CRITICAL, and note that some minor issues are deliberately left without a CVE if the risk of exploitation is deemed negligible.
A security researcher's report describes Omarchy 4.0, the Linux distribution promoted by DHH, as riddled with basic vulnerabilities, including bash injection triggered by video titles and notifications capable of executing arbitrary commands. The report argues these are not obscure edge cases but well-known classes of input-handling flaws that mature software practices routinely prevent, and suggests some scripts may have been AI-generated without proper review.