Category / T-CAT / SOFTWARE
Software
Software / T-2026-6300
DeepSeek-Reasonix bets the coding-agent future on prefix-cache economics
DeepSeek-Reasonix is a terminal coding agent built around prefix-cache stability. A look at what that design says about AI economics.
Sourceesengine/DeepSeek-Reasonix
Software / T-2026-4451
ComfyUI's CVE-2026-56673: A 7.5 path traversal in the AI art stack
CVE-2026-56673 lets unauthenticated ComfyUI workflows exfiltrate host image files. A 7.5 CVSS that exposes deeper AI-tooling trust gaps.
SourceCVE-2026-56673 (CVSS 7.5 HIGH)
Software / T-2026-3521
OpenAI's v2.52.0 Python SDK ships content provenance checks: the quiet turn toward verifiable AI
OpenAI's openai-python v2.52.0 adds content provenance checks. What looks like a minor SDK release signals a strategic shift toward verifiable AI output.
Sourceopenai/openai-python v2.52.0
Software / T-2026-6937
OpenWork takes on Claude Cowork by making AI workflows portable
different-ai's OpenWork is an open-source alternative to Claude Cowork, built around portable AI workflows.
Sourcedifferent-ai/openwork
Software / T-2026-8901
Hugging Face’s speech-to-speech pipeline makes local voice agents a CLI install away
Hugging Face ships speech-to-speech, a modular voice-agent pipeline that runs locally with open models. The implications for AI research and deployment.
Sourcehuggingface/speech-to-speech
Software / T-2026-2199
Microsoft's Agent Governance Toolkit: intercepting agent actions before the prompt
Microsoft's Agent Governance Toolkit ships policy enforcement, zero-trust identity, and audit logging for AI agents, intercepting tool calls in deterministic code before they…
Sourcemicrosoft/agent-governance-toolkit
Software / T-2026-3650
llama.cpp b10156: One Flag, Many Lessons for Local AI
llama.cpp b10156 disables -ffast-math on HIP. The fix reveals deeper tensions between optimization and correctness for local AI on AMD hardware.
Sourceggerganov/llama.cpp b10156
Software / T-2026-4265
OpenAI drops Python 3.9 support: what the v2.49.0 deprecation signals
OpenAI's openai-python v2.49.0 drops Python 3.9 support and automates version reviews. The change signals tighter lifecycle management for the AI SDK.
Sourceopenai/openai-python v2.49.0
Software / T-2026-8595
CVE-2026-64281: The kernel bug that could freeze an AI cluster
A Linux kernel bug in svcrdma can permanently freeze NFS-over-RDMA connections, a transport layer critical to AI cluster storage.
SourceCVE-2026-64281
Software / T-2026-3615
llama.cpp b10142 ports MiniMax-M3: a vision model runs on a laptop
llama.cpp b10142 brings MiniMax-M3 vision to local hardware, with sparse attention, multi-stream support, and a rewritten inference kernel.
Sourceggerganov/llama.cpp b10142
Software / T-2026-4457
Anthropic SDK v0.119.0 Adds Explicit Context Window Exceeded Stop Reason
Anthropic's Python SDK v0.119.0 introduces a dedicated stop reason for context window overflow, forcing agent developers to handle a failure mode that was previously invisible.
Sourceanthropics/anthropic-sdk-python v0.119.0
Software / T-2026-2816
llama.cpp b10099 ships NVFP4: 4-bit inference gets a CUDA rewrite
llama.cpp b10099 rewrites NVFP4 activation quantization for CUDA, fusing kernels and using nvfp4x4 intrinsics to cut memory traffic on Blackwell and Hopper GPUs.
Sourceggerganov/llama.cpp b10099