KrakenD released Enterprise Edition 2.13.11 as a recommended security backport on October 13, 2026, according to its changelog. The changelog also lists Community and Enterprise Edition 3.0.1 releases that day. It says the backport upgrades Go to 1.26.9 and updates amqp and OpenTelemetry dependencies for listed security issues. According to Red Hat, CVE-2026-97032 lets an unauthenticated remote attacker crash Go’s HTTP/2 server if they win an HPACK encoder race. KrakenD says affected versions are exposed when the gateway accepts HTTP/2 through Transport Layer Security negotiation or use_h2c. Sources: KrakenD, Red Hat
NewsEditorialSource: KrakenD
KrakenD releases Enterprise 2.13.11 security backport and Community and Enterprise 3.0.1
Why it matters
KrakenD directs affected users to Community Edition 3.0.1 or Enterprise Edition 2.13.11 or 3.0.1 or later. Operators should prioritize gateways accepting HTTP/2. [3] Edition matters: KrakenD’s changelog dates Community Edition 2.13.11 to September 8, 2026, making it a separate release. [1] Community users migrating from 2.13 should review compatibility: the changelog says Series 3 requires configuration version 4 and removes Community Edition plugin support. [1] The reviewed sources do not establish active exploitation. Red Hat corroborates the crash mechanism, while release dates and patch contents remain vendor-confirmed.
Attribution
Sources
- 1KrakenDChangelog: List of changes between KrakenD versions
- 2Red HatCVE-2026-97032
- 3KrakenDCVE-2026-97032: net/http: HTTP/2 Server Crash via HPACK Encoder Race on Table Size Updates
Read the original source for full details and context.
EditorialSource: Firebase
Google adds QueryData preview to Firestore with MongoDB compatibility
Google announced QueryData support for Firestore with MongoDB compatibility on October 12, 2026. [1] Google says the feature lets developers build data agents that query database content through conversational language. [1] Its documentation says QueryData translates natural-language questions into MongoDB-compatible Query Language (MQL) queries, using developer-supplied context sets with database-specific information. [2] The feature is in preview, with potentially limited support. [2]
ArticleSource: Cloudflare
How to test OpenCode session recovery on Cloudflare Durable Objects
Cloudflare’s experimental OpenCodeHarness documents session recovery after eviction, but external tool effects need a separate test. This guide proposes an interruption after a remote commit, then checks stored state, resumed execution, and the destination’s ledger.
EditorialSource: Microsoft
Microsoft releases October security updates for .NET and .NET Framework
Microsoft’s October servicing announcement lists .NET updates dated October 13, 2026, alongside new .NET Framework security and non-security updates. [1] The .NET releases—10.0.13, 9.0.21 and 8.0.32—include security and non-security fixes. Microsoft’s announcement links to release notes, installers, binaries and container images. [1] Microsoft’s .NET 10 release notes list fixes for information disclosure and denial of service. [3] BleepingComputer reported that the updates also address CVE-2026-108398, a .NET Framework security-feature bypass publicly disclosed before patching. [2]