Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Designing a reverse proxy that survives a Plex SSRF

Designing a reverse proxy that survives a Plex SSRF Most guidance for CVE-2026-96655 ends at "upgrade to 1.43.3.10861". That is correct and sufficient for many owners.

  • Server-side request forgery in Plex mitigated using reverse proxy
  • Endpoint exploitation via /video/:/transcode/universal path parameter
  • Patching vulnerability is most comprehensive solution

Why styled text turns into a little square (tofu): font fallback and Unicode

You paste a name in bold italics in the profile, it appears perfect on your cell phone, and a friend warns that he only sees a row of squares. Nothing is wrong with the text.

  • Tofu characters appear when fonts lack specific glyphs
  • Noto font family designed to prevent tofu rendering
  • Stylized text uses Unicode characters occupying 2 UTF-16 units

More from Friday 23 October →