All guides, page 9 of 20

Newest first. Search or pick a topic.

476 guides, newest first

• Laravel's October 2026 Token Guard Bypass Explained: Validate Input TypesBackend · A plain-English guide to the Laravel token guard auth bypass: how a non-string api_token slipped past the login check and matched a real user on MySQL, shown on one API export feature.15 min read · Updated 23 Oct 2026
• LiteLLM's October 2026 PyPI Compromise Explained: Stolen Tokens, Startup HooksAI and GenAI · A plain-English guide to the LiteLLM PyPI compromise of 21 October 2026: how a poisoned 1.107.0 ran code at every Python start, how the release pipeline was hijacked, and how to check and clean up, shown on one running example of a team's LLM proxy on a cloud VM.23 min read · Updated 23 Oct 2026
• MCP Python SDK's Sept-Oct 2026 Advisories Explained: What Upgrading MissesAI and GenAI · A plain-English guide to the six MCP Python SDK advisories of September and October 2026: what each bug did, what mcp 1.30.0 and 2.2.0 fix by default and which settings you still must change, shown on one running example of a company agent and its internal MCP server.26 min read · Updated 23 Oct 2026
• Mermaid to SVG Explained: Rendering Diagrams at Build Time with PeleFrontend · A plain-English guide to rendering Mermaid diagrams to SVG: why build-time rendering beats shipping a large renderer to every reader, what Pele 1.9 changes and what to check, shown on one running example of a team's docs handbook.27 min read · Updated 23 Oct 2026
• Nextcloud Collabora Vulnerability 2026 Explained: Patch the Built-in CODE ServerBackend · A plain-English guide to the Nextcloud Collabora vulnerability CVE-2026-110447: how an escaped value landed inside a double-quoted shell command in proxy.php and ran code without any login, who is affected, and the fix, shown on one running example of a self-hosted file server that starts a document server on demand.18 min read · Updated 23 Oct 2026
• Node.js's October 2026 Security Release Explained: NUL Bytes, Odd IP SpellingsBackend · A plain-English guide to the Node.js security release of 21 October 2026: the 10 CVEs, how NUL bytes and odd IP spellings slipped past checks, and how to upgrade, shown on one running example of a webhook service.24 min read · Updated 23 Oct 2026
• Plex's October 2026 Plex2Shell Bugs Explained: How to Patch and CheckBackend · A plain-English guide to Plex2Shell, the four Plex Media Server bugs that chain into remote code execution, fixed in 1.43.3.10861: how they work, who is at risk and how to patch and check, shown on one home media server.19 min read · Updated 23 Oct 2026
• psqlODBC's October 2026 CVE Explained: When Huge IN Lists Corrupt the HeapBackend · A plain-English guide to the psqlODBC vulnerability CVE-2026-109448: how a 16-bit parameter count wrapped, what 18.00.0005 changed, how to check and upgrade, shown on one running example of a nightly ID export.21 min read · Updated 23 Oct 2026
• vLLM 0.32 Breaking Changes Explained: Locked-Down CORS and Template LimitsAI and GenAI · A plain-English guide to the vLLM 0.32 upgrade: the closed CORS default and the flag that reopens it, chat template time limits, refused image formats and the new max_tokens rule, shown on one running example of an internal chat page.20 min read · Updated 23 Oct 2026
• Zeabur's October 2026 Security Incident Explained: Plaintext Admin TokensBackend · A plain-English guide to the Zeabur security incident: the plaintext admin tokens that never expired, what users must rotate, how to leave before 1 December 2026, and token hashing, expiry and inventory, shown on one running example of a food-ordering app.24 min read · Updated 23 Oct 2026
• Agentic Design Patterns: Chaining, Routing, Parallel and LoopsAI and GenAI · A plain-English guide to agentic design patterns: five ways to split an LLM app, from prompt chaining to evaluator loops, with a table for picking one, shown on one running example of a travel-booking assistant.25 min read · Updated 22 Oct 2026
• Agentic RAG: When Retrieval Becomes a DecisionAI and GenAI · A plain-English guide to agentic RAG: how the model decides whether, where and what to search, and checks what it finds, shown on one running university helpdesk example.26 min read · Updated 22 Oct 2026
• AI Coding Assistant Team Setup: Rules, Permissions and ReviewAI and GenAI · A plain-English guide to rolling out an AI coding assistant across a developer team: shared rules files, safe permissions, secrets, enforced code review and honest measurement, shown on one running example of a 12-person product team.28 min read · Updated 22 Oct 2026
• API Pagination: Offset vs Cursor, and Why Offsets BreakBackend · A plain-English guide to API pagination: why offset pages repeat and skip items and how cursors fix it, shown on one running example of a busy city classifieds feed.23 min read · Updated 22 Oct 2026
• API Versioning Strategies: URL, Header or Evolve in PlaceBackend · A plain-English guide to API versioning that compares URL, header and evolve-in-place strategies, built on one running GST-invoicing API example.24 min read · Updated 22 Oct 2026
• Autocomplete System Design: Tries, Ranking and LatencySystem design · A plain-English guide to autocomplete system design: tries with ready-made top suggestions, ranking from search logs and a tight latency budget, shown on one running example of a home-goods marketplace.25 min read · Updated 22 Oct 2026
• Back-of-the-Envelope Estimation for System DesignSystem design · A plain-English guide to back-of-the-envelope estimation: the latency numbers to know and how to turn daily users into requests per second, storage, bandwidth and servers, shown on one running example of a family photo-sharing app.29 min read · Updated 22 Oct 2026
• Deployment Strategies: Blue-Green, Canary and RollingBackend · A plain-English guide to blue-green, canary and rolling deployments: how each one moves users, how to change the database safely and how to roll back fast, shown on one running example of a small-loans app.20 min read · Updated 22 Oct 2026
• CAP Theorem vs PACELC: The Latency Half CAP Leaves OutSystem design · A plain-English guide to the CAP theorem and PACELC, showing what CAP says about network splits and the everyday latency trade-off it leaves out, built on one running homestay booking example.25 min read · Updated 22 Oct 2026
• How a CDN Works: Push vs Pull, Cache Keys and PurgesSystem design · A plain-English guide to how a CDN works: edge servers, push and pull, cache keys, TTLs, purges and a test edge you can run, shown on one running example of a streaming app's premiere night.28 min read · Updated 22 Oct 2026
• Circuit Breaker Pattern: Fail Fast When a Dependency Is SickSystem design · A plain-English guide to the circuit breaker pattern: its three states, trip rules, fallbacks and retries, shown on one running example of an online shop's payment gateway.20 min read · Updated 22 Oct 2026
• Coding Agent Architecture: Harness, Tools and SandboxesAI and GenAI · A plain-English guide to coding agent architecture: the harness loop, tools, sandboxes, context on big repositories and test checks, shown on one running example of a billing bug fix.24 min read · Updated 22 Oct 2026
• Consistency Models: From Linearizable to EventualSystem design · A plain-English guide to consistency models: linearizable to eventual, each step shown with a real system and one feature of a live sports app.26 min read · Updated 22 Oct 2026
• Consistent Hashing Explained: Add Nodes Without a ReshuffleSystem design · A plain-English guide to consistent hashing, from the hash mod N trap to rings, virtual nodes and bounded loads, built on one running image cache example.24 min read · Updated 22 Oct 2026