Vaultwarden 1.37.4 Fixes Seven Security Advisories, Including a High-Severity Organization Access Issue
Vaultwarden, the popular unofficial Rust implementation of the Bitwarden server, has shipped version 1.37.4. The release landed on October 5,…
Category: Network & Security
Homelab networking and security: reverse proxies, VPNs like WireGuard and Tailscale, DNS ad blocking, and the security patches self-hosters should apply.
Gitea 28.0.0 Drops the 1.x Version Prefix, Adds Audit Logging
Gitea shipped version 28.0.0 on September 30, dropping the “1.” prefix the project had carried since its first stable release.…
Gitea v1.27.3 Ships 18 Security Hardening Fixes
Gitea v1.27.3 landed August 29, 2026 with an unusually long SECURITY section: 18 separate access-control hardening fixes, none carrying a…
Gitea RCE Flaw Now Under Active Exploitation, CISA Confirms
CISA has added CVE-2026-60004, the critical Gitea RCE flaw patched in version 1.27.1, to its Known Exploited Vulnerabilities catalog, confirming…
authentik 2026.8 Is OpenID Certified, With a Rust Rewrite and Two Breaking Changes
authentik 2026.8 arrived on 18 August 2026 as a major release for the self-hosted identity provider. It brings official OpenID…
Gitea CVE-2026-59774: Critical Arbitrary File Read Vulnerability
CVE-2026-59774 is a critical CVSS 9.8 vulnerability in Gitea 1.22.1–1.27.0 allowing arbitrary file read via Org-mode markup. Active exploitation confirmed.…
Gitea Security Update 1.27.1 Patches Two Critical Vulnerabilities
Gitea 1.27.1 fixes two security bugs, including CVE-2026-59774, a CVSS 9.8 unauthenticated file read that works against any public repository…
Vaultwarden 1.37.0 Patches Eight Security Advisories
Vaultwarden 1.37.0, released July 24 2026, fixes eight Medium-severity security advisories covering an icon-endpoint SSRF flaw and several cross-organization access…
Critical Gitea Docker Authentication Bypass Vulnerability Actively Exploited (CVE-2026-20896)
CVE-2026-20896 carries a CVSS score of 9.8, rated Critical, and it’s now being actively exploited against self-hosted Gitea instances that…
Self-Hosted Password Manager: Vaultwarden vs Bitwarden in 2026
An honest comparison of Vaultwarden, Bitwarden’s own self-hosted release, and KeePassXC: what actually differs, how to deploy Vaultwarden in Docker,…
