Twenty CRM vulnerability exposed plaintext mailbox passwords to workspace members

·2 views

A security flaw in Twenty CRM, designated CVE-2026-105763, exposed mailbox passwords in cleartext to any workspace member. The vulnerability affects versions 1.20.10 up to, but not including, 2.7.0. Remediation requires upgrading to version 2.7.0 or later, which encrypts credentials and restricts access. Administrators must also rotate all exposed mailbox passwords externally due to the prior plaintext exposure.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Solo-run AI API reference site sees starkly different indexing from Google and Bing

The creator of the independent reference site ai-info published a two-month review on October 8-9, 2026. Google initially indexed only a single navigation page but later removed it, leaving just three structural pages indexed while excluding all 42 articles. In contrast, Bing promptly indexed the site's content and recognized backlinks from external posts. The operator concluded the two search engines are applying very different criteria to the new site's content.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Open-Source C++ Course Teaches YOLOv8 Deployment with TensorRT

A developer has released an open-source, hands-on course titled 'Learn TensorRT' designed for engineers moving PyTorch models to C++ deployment. The course uses YOLOv8 as a baseline and covers correctness, optimization, and pipeline behavior using TensorRT 10.14, CUDA 13.0, and C++17. It is structured as a series of lessons with build instructions and is intended for Ubuntu systems with an NVIDIA GPU. The MIT-licensed project includes multilingual documentation and invites feedback on its reproducibility.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Tech Leaders Shorten AGI Timelines, Impacting Strategic Planning

Lab CEOs are publicly predicting artificial general intelligence will arrive sooner than previously forecast. OpenAI's Sam Altman, Anthropic's Dario Amodei, and xAI's Elon Musk all foresee human-level AI emerging within the next two years. Independent forecasters and academic surveys project a later arrival, with a major survey of AI researchers placing the median estimate at 2047. These volatile predictions are driven by rapid advances in computing and algorithms. The shortened timelines are forcing technical leaders to urgently reconsider their long-term software and AI adoption strategies.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

FreyaVideo outlines image API acceptance test beyond basic task success

A technical note from FreyaVideo emphasizes that image generation API acceptance tests should verify more than just successful task completion. The note, prepared with AI assistance and based on integration records, outlines three separate checks: request acceptance, decoded output properties, and image usefulness for intended layouts. It provides examples from integration with Nano Banana 2.1 where requested specifications differed from actual outputs, such as aspect ratio deviations. The document warns that technical success does not guarantee usable images and advises recording multiple verification fields, including credits and provider invoices. These tests are presented as internal worksheets, not independent quality rankings.

0 comments Read more at DEV Community