Predis 3.6.1 Fixes a Real CRLF Command Smuggling CVE
Predis 3.6.1 patches a real CRLF command smuggling CVE affecting Redis clusters. Here's what changed and why PHP/Laravel teams should upgrade now.
Scout Blog
Stuff we think matters
Mongoid 7.6.2 Patches Four Real Security Gaps, Not Just Bugs
Mongoid 7.6.2 looks like a routine patch but closes four real security gaps, from NoSQL injection to ReDoS.
OpenAI Python SDK 3.17.0: a Breaking Change and Six New Features
OpenAI's Python SDK 3.17.0 ships a breaking change to local shell tool output plus six new features. Here's what Python teams need to know before upgrading.
This Week in Open Source: September 21, 2026
OAuth/OIDC hardening continues across Symfony, Doorkeeper, and MCP SDKs for a second week running, plus Predis's official CVE release, Mongoid's security patches disguised as a routine bump, and a queued breaking change in openai-python.
Anomaly Detection Is Now Generally Available
Anomaly Detection is out of beta and included on every Scout plan. It learns each endpoint's normal behavior and flags real deviations, no thresholds to configure.
This Week in Open Source: September 15, 2026
Security patches from Predis, Express, and Doorkeeper, plus new Anthropic and OpenAI SDK releases and real OpenTelemetry tracing landing in MongoDB's Python driver.
Can we live dangerously? Sandboxing Claude, and the Claude foreman that runs the rest
How Scout runs a pen full of Claude agents behind one foreman, inside a sandbox with zero blast radius, credentials and all.
Prompts, skills, and the AGENTS.md nobody wants to write (and how Anthropic writes theirs)
The model isn't the only lever, and it's rarely the one you control. What you feed it is. A look at how Claude actually uses prompts, skills, and AGENTS.md, how to write each one well, and how we wire all three into Corral.
NestJS v12 Ships Native Observability: What It Means for Your APM
NestJS 12 launches @nestjs/observe, a native observability SDK. We break down what it does, where it falls short, and how it compares to cross-stack APM.
This Week in Open Source: August 28, 2026
NestJS v12 ships native observability via @nestjs/observe, Oban unifies config, Phoenix switches JSON libraries, and Symfony patches three branches.
Starlette Is Adding Native OpenTelemetry Tracing. Here's What That Means for Your APM.
Starlette has an open PR to add native OTel spans. Here's what that means if you run Starlette or FastAPI with an APM tool.
This Week in Open Source: August 16, 2026
Rails batches schema reads, node-mysql2 lands 3-6x perf wins, OpenAI Python SDK hits v3.0.0, and Starlette proposes native OTel tracing.