<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — #python</title><description>Articles tagged python on devtake.dev.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>One bad Host header bypassed auth in Starlette, the routing core under millions of AI agents</title><link>https://devtake.dev/article/ai-agents-package-rce-vulnerability/</link><guid isPermaLink="true">https://devtake.dev/article/ai-agents-package-rce-vulnerability/</guid><description>A flaw in Starlette, downloaded 325M times a week, let a single Host-header character bypass path-based auth across FastAPI, vLLM, and MCP servers.</description><pubDate>Mon, 08 Jun 2026 10:00:00 GMT</pubDate><category>security</category><category>security</category><category>supply-chain</category><category>ai-agents</category><category>mcp</category><category>cve-2026-48710</category><category>python</category><category>fastapi</category><author>luca-reinhardt</author></item><item><title>Texas Instruments shipped the TI-84 Evo. $160, USB-C, 3x faster, still exam-approved.</title><link>https://devtake.dev/article/ti-84-evo-graphing-calculator/</link><guid isPermaLink="true">https://devtake.dev/article/ti-84-evo-graphing-calculator/</guid><description>TI&apos;s first big redesign of the TI-84 in over a decade ships April 28 with a 156 MHz Cortex chip, a 50% larger graphing area, and Python on board. Exam boards still approve it.</description><pubDate>Tue, 05 May 2026 09:00:00 GMT</pubDate><category>hardware</category><category>hardware</category><category>texas-instruments</category><category>ti-84</category><category>graphing-calculator</category><category>education</category><category>usb-c</category><category>python</category><category>edtech</category><author>hiro-tanaka</author></item><item><title>Mini Shai-Hulud hit PyTorch Lightning. The 11.6M-download PyPI package shipped a credential stealer.</title><link>https://devtake.dev/article/pytorch-lightning-pypi-compromise-mini-shai-hulud/</link><guid isPermaLink="true">https://devtake.dev/article/pytorch-lightning-pypi-compromise-mini-shai-hulud/</guid><description>Two malicious lightning releases hit PyPI on April 30. The 42-minute window was enough to ship an RSA-encrypted infostealer to ML developers worldwide.</description><pubDate>Sat, 02 May 2026 09:00:00 GMT</pubDate><category>security</category><category>pytorch-lightning</category><category>pypi</category><category>supply-chain</category><category>mini-shai-hulud</category><category>credential-theft</category><category>python</category><category>ml</category><category>security</category><author>luca-reinhardt</author></item></channel></rss>