Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

CVE-2026-118254: CVE-2026-118254: DOM-based Cross-Site Scripting in Highcharts Grid Pagination Module

CVE-2026-118254: DOM-based Cross-Site Scripting in Highcharts Grid Pagination Module Vulnerability ID: CVE-2026-118254 CVSS Score: 8.6 Published: 2026-10-28 CVE-2026-118254 (GHSA-r5wg-q8fc-p6w2) is a…

  • Highcharts Grid versions 2.0.0 to 3.1.0 vulnerable to DOM-based XSS
  • innerHTML used instead of innerText or textContent in pagination module
  • Upgrade to version 3.2.0 or higher to resolve the issue

Unlimited-OCR 2 on a 16 GB GPU: it reads as well as Chandra 2, but it is not unlimited

On October 27 Baidu released Unlimited-OCR 2: 3.3B parameters, MIT license, and a promise that its sparse attention keeps "per-step decoding latency and memory footprint nearly constant regardless of…

  • Unlimited-OCR 2 model matches Chandra 2's performance on error rates
  • Struggles with memory and time on 16 GB GPU for large documents
  • Marker 2.0 recommended for practical large-file OCR processing

More from Wednesday 28 October →