<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://devnews.news/news/languages/pgadmin-4-9-19-fifteen-cves-server-mode-allowlists/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>pgAdmin 4 v9.19 fixes 15 vulnerabilities, most of them in server mode</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/frameworks/hono-4-13-16-five-security-fixes-mount-regexprouter-csrf/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>Hono 4.13.16 fixes five ways a request could slip past middleware</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/tooling/linux-7-2-15-last-release-7-2-end-of-life-move-to-7-3/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>Linux 7.2.15 is the last 7.2 release; the branch reaches end of life early</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/security/gnu-savannah-email-address-rce-bash-maintainer-push-access/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>An email address gave code execution on GNU Savannah, home of Bash</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/cloud/cloudfront-viewer-isp-and-tls-details-headers-post-quantum/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>CloudFront can now tell an origin the viewer&#x27;s ISP and whether TLS used PQC</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/languages/pgadmin-4-9-19-fifteen-cves-server-mode-allowlists/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>pgAdmin 4 v9.19 behebt 15 Schwachstellen, die meisten im Servermodus</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/frameworks/hono-4-13-16-five-security-fixes-mount-regexprouter-csrf/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>Hono 4.13.16 schließt fünf Wege, Middleware mit einer Anfrage zu umgehen</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/tooling/linux-7-2-15-last-release-7-2-end-of-life-move-to-7-3/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>Linux 7.2.15 ist das letzte 7.2-Release; der Zweig endet früher als üblich</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/security/gnu-savannah-email-address-rce-bash-maintainer-push-access/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>Eine E-Mail-Adresse brachte Codeausführung auf GNU Savannah, Heimat von Bash</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/cloud/cloudfront-viewer-isp-and-tls-details-headers-post-quantum/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:12+01:00</news:publication_date>
      <news:title>CloudFront meldet dem Origin jetzt Provider des Nutzers und PQC-Status von TLS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/trigger-dev-security-incident-environment-variables-exposed/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:11+01:00</news:publication_date>
      <news:title>Trigger.dev says an attacker read environment variables of some customers</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/ai/chatgpt-codex-shared-usage-allowance-tokens-december/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:11+01:00</news:publication_date>
      <news:title>ChatGPT and Codex will share one token-based usage allowance from December</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/trigger-dev-security-incident-environment-variables-exposed/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:11+01:00</news:publication_date>
      <news:title>Trigger.dev: Angreifer las Umgebungsvariablen eines Teils der Kunden</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/ai/chatgpt-codex-shared-usage-allowance-tokens-december/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T08:40:11+01:00</news:publication_date>
      <news:title>ChatGPT und Codex teilen ab Dezember ein tokenbasiertes Kontingent</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/tooling/github-adds-three-webhook-ip-ranges-to-meta-api/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:04+01:00</news:publication_date>
      <news:title>GitHub adds three webhook delivery IP ranges to its Meta API</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/security/linux-mptcp-remote-root-cve-2026-98432-go-listeners-default/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:04+01:00</news:publication_date>
      <news:title>Linux multipath TCP bug allows remote root; Go servers use MPTCP by default</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/tooling/github-adds-three-webhook-ip-ranges-to-meta-api/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:04+01:00</news:publication_date>
      <news:title>GitHub ergänzt drei IP-Bereiche für Webhook-Zustellungen in der Meta-API</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/security/linux-mptcp-remote-root-cve-2026-98432-go-listeners-default/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:04+01:00</news:publication_date>
      <news:title>Linux-Fehler in Multipath TCP gibt Root aus der Ferne; Go nutzt MPTCP ab Werk</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/northflank-breach-rotate-all-secrets-ai-keys-abused/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Northflank breach: customers told to treat all env variables as exposed</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/languages/nodejs-27-alpha-v8-15-6-openssl-3-required-heap-defaults/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Node.js 27 alpha: V8 15.6, OpenSSL 3 required, a new default heap limit</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/frameworks/this-week-in-rails-header-only-csrf-no-tokens-capybara-lazy/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Rails this week: no CSRF tokens under header_only, lazier test gems</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/cloud/cloudflare-private-origins-generally-available/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Cloudflare opens private origins to all: WAF and caching without a public IP</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/news/ai/openai-to-honor-shared-robots-txt-ai-training-signal/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>OpenAI will honour a shared robots.txt token for opting out of AI training</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/northflank-breach-rotate-all-secrets-ai-keys-abused/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Northflank-Einbruch: Alle Umgebungsvariablen gelten als offengelegt</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/languages/nodejs-27-alpha-v8-15-6-openssl-3-required-heap-defaults/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Node.js 27 Alpha: V8 15.6, OpenSSL 3 Pflicht, neues Heap-Limit ab Werk</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/frameworks/this-week-in-rails-header-only-csrf-no-tokens-capybara-lazy/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Rails diese Woche: keine CSRF-Tokens bei header_only, Test-Gems später geladen</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/cloud/cloudflare-private-origins-generally-available/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>Cloudflare öffnet private Origins: WAF und Caching ohne öffentliche IP</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://devnews.news/de/news/ai/openai-to-honor-shared-robots-txt-ai-training-signal/</loc>
    <news:news>
      <news:publication>
        <news:name>Dev News Daily</news:name>
        <news:language>de</news:language>
      </news:publication>
      <news:publication_date>2026-10-31T10:24:03+01:00</news:publication_date>
      <news:title>OpenAI will ein gemeinsames robots.txt-Signal gegen KI-Training beachten</news:title>
    </news:news>
  </url>
</urlset>