Notes from looking closely.

Short accounts of what broke, why it mattered, and how maintainers repaired it.

Follow the Atom feed

Panic recovery stays local

PocketBase recovered panics during ordinary request handling, but work moved into child goroutines lived beyond that boundary. A reachable panic could terminate the server instead of becoming a regular error.

PocketBaseCVE-2026-82410