This Week in Spring - December 9th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in lovely New Jersey, the Garden State , as I write this and I spent most of the last week in New Orleans. It's been a busy week in the Spring community and beyond and so you know what that means? There's a ton of stuff ...

MAL-2025-191153 Malicious code in web-types-htmx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999540b3b5a1066e399c44ecf2f220a5318cdea88dea33416c1a3c55bcf80fb7 The package web-types-htmx was found to contain malicious code. Source: ghsa-malware 07877f867a5e18001cab22b77adf1b5bf737045f63a8ba9a2471208dde03f072...

EUVD-2025-199192

Malicious code in web-types-htmx npm...

Malicious code in web-types-htmx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999540b3b5a1066e399c44ecf2f220a5318cdea88dea33416c1a3c55bcf80fb7 The package web-types-htmx was found to contain malicious code. Source: ghsa-malware 07877f867a5e18001cab22b77adf1b5bf737045f63a8ba9a2471208dde03f072...

Building Serverless Apps with Spin and HTMX

A tutorial on building serverless applications using Fermyon Spin and htmx, demonstrating a shopping list app with a Rust back end and htmx-enhanced front end...

This Week in Spring - February 4th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's February 4th, 2025, as I write this. We are ten days away from Valentine's day, and about a month away from Devnexus. Lots to look forward to, in both the short term and the long term! Let's dive right into this week's...

A Bootiful Podcast: HTMX creator Carson Gross

Hi, Spring and HTML fans! Today I talk to hypermedia enjoyer Carson Gross, creator of the ever popular HTMX library which eschews a ton of the complexity associated with building client side applications...

This Week in Spring - November 26th, 2024

This Week in Spring - November 26th, 2024 Hi, Spring fans! Welcome to another installment of This Week in Spring! Happy Spring Boot 3.4 release month to those who celebrate! And, also, Happy Thanksgiving to those who celebrate! Spring Boot 3.4 brings with it long-anticipated updates to the entire...

litestar-htmx (>=0.1.0 <=0.2.4), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2024-52581 via litestar (>=2.0.0b2 <=2.12.1)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2024-52581 Source advisory: SNYK:PYTHON-LITESTAR-8400286...

litestar-htmx (>=0.1.0 <=0.2.4), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2024-52581 via litestar (>=2.0.0b2 <=2.12.1)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2024-52581 Source advisory: OSV:PYSEC-2024-178...

This Week in Spring - October 22nd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring. I write this to you in an Uber speeding down the autobahn near Frankfurt, Germany. What a time to be alive! At the rate this driver's going, I won't have much time to write this before we've arrived, so let's dive right into...

Hypermedia and Browser Enhancement

Front end development these days is dominated by large JavaScript client side frameworks. There are plenty of good reasons for that, but it can be very inefficient for many use cases, and the framework engineering has become extremely complex. In this article, I want to explore a different...

This Week in Spring - July 18th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in crazy cool Kuala Lumpur, Malaysia. If you're around, I'll be doing a presentation this Thursday the 20th of July, and I'd love to see you there! Then, after a quick vacation, it's off to Tokyo, Japan, where I'll also b...

ambition-edc (>=0.3.68 <=0.3.72), caluma (>=5.2.1 <=5.6.0) +35 more potentially affected by CVE-2020-13596 via django (>=2.2.0 <=2.2.12)

django PYPI version =2.2.0, =0.3.68, =5.2.1, =0.1.0, =0.0.1, =0.0.1, =0.3.0a0, =0.0.1, =0.0.1, =0.0.26 and more Source cves: CVE-2020-13596 Source advisory: OSV:GHSA-2M34-JCJV-45XF...

ambition-edc (>=0.3.68 <=0.3.72), caluma (>=5.2.1 <=5.6.0) +35 more potentially affected by CVE-2020-13254 via django (>=2.2.0 <=2.2.12)

django PYPI version =2.2.0, =0.3.68, =5.2.1, =0.1.0, =0.0.1, =0.0.1, =0.3.0a0, =0.0.1, =0.0.1, =0.0.26 and more Source cves: CVE-2020-13254 Source advisory: OSV:GHSA-WPJR-J57X-WXFW...

ambition-edc (>=0.3.68 <=0.3.72), caluma (>=5.2.1 <=5.3.1) +28 more potentially affected by CVE-2020-9402 via django (>=2.2.0 <=2.2.10)

django PYPI version =2.2.0, =0.3.68, =5.2.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.26 - django-smorest =0.1.3 - djangorestframework-simplejwt-captcha =1.1.4 - djpub =0.0.1 and more Source cves: CVE-2020-9402 Source advisory: OSV:PYSEC-2020-36...