DevHunt Daily
Thursday, November 12, 2026
- 1SecurityHacker News
Critical race condition in Apache HTTP Server mod_http2 enables remote code execution
A high‑severity vulnerability (CVE‑2026‑119618) in Apache HTTP Server’s HTTP/2 module allows unauthenticated attackers to corrupt heap memory and achieve RCE. The flaw affects versions 2.4.55‑2.4.70 and can be mitigated by upgrading to 2.4.71 or disabling HTTP/2. Developers using Apache should apply the patch promptly.
- 2SecurityHacker News
GitHub experiences degraded availability across Actions, Pages, Webhooks and Copilot
GitHub reported a multi‑product outage affecting Actions, Pages, Webhooks and Copilot, causing degraded performance and backlogs. The issue was resolved after processing the Actions job backlog and restoring full service. Developers using these features should be aware of the temporary disruption.
- 3Dev toolsHacker News
AWS releases updates to its open-source emulator
The AWS emulator repository received several recent commits fixing service behavior and adding new features. Changes include fixes for Lambda, Cognito, and account access runtime services, as well as core component updates. Developers can use the emulator to test AWS services locally without incurring cloud costs.
- 4AIGitHub Trending
shadcn/improve adds AI agent skill for code audits and execution plans
The new improve skill lets a powerful model audit a codebase and generate detailed implementation plans for cheaper models to execute. Developers can run commands like /improve to get findings, prioritized plans, and automated execution in isolated worktrees, streamlining code maintenance and refactoring.
github.com361 stars today - 5SecurityGitHub Trending
OpenAI releases Codex Security CLI and TypeScript SDK for vulnerability scanning
OpenAI introduced the Codex Security CLI and a TypeScript SDK that let developers scan codebases for security issues, validate findings, and generate patches. The tools support repository scans, policy drafting, and integration with CI pipelines, helping developers automate security workflows.
github.com52 stars today - 6LanguagesLobsters
Microsoft releases .NET 11 with C# 15 and AI development features
Microsoft announced .NET 11, a Standard Term Support release with two years of support. It includes C# 15 union types, native AOT CLI host, ASP.NET Core updates, and AI‑powered development tools, aiming to improve performance and productivity for developers.
- 7SecuritySimon Willison
llm 0.37.2 release patches security flaw in OpenAI endpoint handling
Version 0.37.2 of the llm command‑line tool fixes a security issue where the OpenAI API key could be unintentionally sent to third‑party providers. The fix updates the extra‑openai‑models.yaml handling and adds a new llm openai endpoint add command. Developers using llm with external OpenAI‑compatible services should upgrade.
simonwillison.net - 8Dev toolsHacker News
Atuin adds Threads to sync and resume AI agent sessions across machines
Atuin 18.24 introduces Threads, letting developers search, sync, and resume AI agent sessions like Claude Code or Codex on any device. The feature stores full session history, is end‑to‑end encrypted, and supports team sharing, helping retain context beyond shell history.
- 9AISimon Willison
Google launches Gemini Decision 1 API for multimodal decision queries
Google added Gemini Decision 1 to its decision model lineup, supporting yes/no, choice, and rubric‑scoring questions across text, images, audio, video, and PDFs. The model is priced at $0.10 per million input tokens with free output, matching OpenAI's Luna pricing but offering broader modality support. Developers can use it for structured decision tasks on diverse media.
simonwillison.net - 10Dev toolsDevHunt launch
String launches web scraping API with high success on bot-protected sites
String offers an API that fetches webpages as Markdown, HTML or JSON, handling Cloudflare, DataDome and Akamai protections automatically. It manages proxies and retries, provides free credit for new users, and achieved a 98.6% success rate in a benchmark of 17 scraping services. Developers can use it for scraping, search and site mapping without managing infrastructure.
35 points - 11Dev toolsDevHunt launch
three.dev detects AI agent failures before users notice
three.dev monitors AI agents by routing traffic through a base URL or pasting prompts into supported tools, scoring live interactions without added latency. It categorizes failures by severity, allowing developers to prioritize fixes and compare performance before and after changes.
24 points - 12AIProduct Hunt
CALL-E lets AI assistants place real phone calls
CALL-E enables AI agents such as ChatGPT and Claude to make phone calls on a user’s behalf, handling menus, hold and voicemail. Developers can integrate it with Claude Code, Codex or Cursor with a single prompt, receiving call transcripts and summaries. New users receive 100 free credits.
producthunt.com - 13AIProduct Hunt
n8n launches Nod, an open‑source personal AI agent with its own computer
Nod is a free, open‑source personal AI agent that runs on a private virtual machine on your Mac or PC. It can interact with over 200 services and perform tasks on websites without APIs, while requiring user confirmation for actions. Developers can use it to automate workflows with full control and trust.
producthunt.com
