ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Atlassian · bitbucket · egress Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  2. Google · Google Cloud · us-west1 Changed list12 linked entries across history · in Other vendors Follow evidence and connection reasons
  3. Google · Google Cloud · asia-south2 Changed list7 linked entries across history · in Other vendors Follow evidence and connection reasons
  4. Google · Google Cloud · asia-southeast1 Changed list7 linked entries across history · in Other vendors Follow evidence and connection reasons
  5. The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content. Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  6. The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This cou… Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  7. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connectio… Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  8. Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certif… Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  9. axios 0.28.0 before 0.33.0 and 1.0.0 before 1.18.0 Denial of Service via formToJSON Advisory content revised: axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when serializing FormData with Content-Type: application/json). When a…2 linked entries across history · in Security Follow evidence and connection reasons
  10. Google · Google Cloud · asia-northeast3 Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  11. Google · Google Cloud · europe-west2 Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  12. Google · Google Cloud · europe-west3 Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  13. Google · Google Cloud · europe-west4 Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  14. Google · Google Cloud · northamerica-south1 Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  15. Amazon Web Services · AMAZON · ap-northeast-1 Changed list4 linked entries across history · in Other vendors Follow evidence and connection reasons
  16. OpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects Advisory content revised: OpenClaw before 2026.4.8 contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request bodies to be resent across cross-origin redirects. Attackers can exploit this by triggering redirects to exfiltrate sensi…3 linked entries across history · in Security Follow evidence and connection reasons
  17. DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags Advisory content revised: DOMPurify before 3.4.7 passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is…3 linked entries across history · in Security Follow evidence and connection reasons
  18. Amazon Web Services · EC2 · ap-northeast-1 Changed list3 linked entries across history · in Other vendors Follow evidence and connection reasons
  19. GitHub · actions Changed list3 linked entries across history · in Other vendors Follow evidence and connection reasons
  20. golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token i… Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  21. DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an IN_PLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutral… Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  22. Identity and access | Identity and sign-in (v1.0): 2 API change passages Graph announcement revised · 2 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  23. Amazon Web Services · EFS Changed list4 linked entries across history · in Other vendors Follow evidence and connection reasons
  24. GitHub: Incident with Dependabot Service incident3 linked entries across history · in Admin tools Follow evidence and connection reasons
  25. Microsoft Edge: Ground Microsoft 365 Copilot Chat in Edge for Business Roadmap entry3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  26. Entra service limits Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  27. OpenAI: Elevated errors for GPT Image 2 API image edits Service incident2 linked entries across history · in Other vendors Follow evidence and connection reasons
  28. MC1247893: Microsoft Entra passkeys on Windows now support phishing-resistant sign-in Notice updated: MC1282568: (Updated) General Availability: Microsoft Entra passkeys on Windows2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  29. Amazon Web Services · CLOUDFRONT · eusc-de-east-1 Changed list2 linked entries across history · in Other vendors Follow evidence and connection reasons
  30. Microsoft Edge: Microsoft 365 Copilot Chat access to page content will soon extend to work across multiple open tabs Notice updated: MC1187682: (Updated) Microsoft Edge: Microsoft 365 Copilot will support summarization and contextual grounding2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 21:39 UTC · 274 of 275 readable · 270 fully read · documentation 468/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.