Java

Blockchain.com has opened a full-time position for a Senior React Native Engineer based in Buenos Aires, Argentina. The role calls for experience with React Native, JavaScript, TypeScript, Kotlin and Swift, covering both Android and iOS development along with CI/CD practices. The listing is being shared across developer job boards and circulated among developers tracking mobile engineering opportunities in the crypto industry.

A web developer has released AtomAttr, a new CSS framework built around HTML attributes rather than classes, with the stated aim of offering something different from the many existing CSS frameworks. The project is open source and the developer has shared it with the web development community, framing it as an attempt to avoid building just another framework. Early reaction is appearing across web development and frontend engineering discussions.

A critical vulnerability, tracked as CVE-2026-59265, has been found in Apache OpenOffice's Java integration. Opening a crafted untrusted document can allow arbitrary code execution on the affected machine. Versions 4.1.16 and earlier are affected, and no exploitation has been confirmed so far. A fix is expected in version 4.1.17; users are advised to disable the Java runtime as an interim measure.

A new vulnerability, CVE-2026-71887, has been disclosed affecting the Legion of the Bouncy Castle cryptography library for Java. The flaw is classed as CWE-347, improper verification of cryptographic signature, meaning the library may accept signatures it should reject. Security researchers are sharing the advisory and tracking potential impact on Java applications relying on the widely used library.

Storyteller Platform has published version 1.0.0 of its @storyteller-platform/epub package, an open-source JavaScript library. The first stable release was announced on the project's blog and is being shared among developers interested in JavaScript and open-source tooling. As the first 1.0 milestone, it signals the library is considered ready for production use.

A practical guide is walking developers through six common currency mistakes in software, covering floating-point errors, decimal places, currency symbols, base versus quote rates, and stale exchange rates, with worked examples in JavaScript and Python. The piece argues that handling money in code demands more care than typical numeric programming, and it is being shared among web, fintech and software engineering communities.

A new blog post introduces an approach to writing readable regular expressions in JavaScript and TypeScript, borrowing ideas from Emacs' rx macro, which lets developers compose regexes with readable symbolic expressions instead of dense syntax. The article has drawn attention in programming communities, where developers are comparing the technique with other regex readability tools and debating whether such abstractions belong in modern JavaScript workflows.

Veteran center JaVale McGee, a three-time NBA champion, has signed a contract with the Shanghai Sharks of the Chinese Basketball Association. The club had already reached an agreement with former NBA guard D'Angelo Russell earlier, making the Sharks one of the most talked-about teams in the league this offseason as they add experienced former NBA talent to their roster.

Reddit is recruiting a full-time Software Engineer for its Consumer Engineering team, with the position remote and based in the United States. The posting lists a broad stack including C++, Go, Java, Kotlin, Python and Rust, alongside skills in GraphQL, gRPC, Firebase, PostgreSQL and Redis, covering both Android and iOS work. It is circulating among developers tracking job openings.

Security researchers have disclosed eight vulnerabilities in Apache MINA SSHD, the Java library for SSH connections, that together can allow authentication bypass. The flaws, tracked under CVE identifiers including CVE-2026-94052, CVE-2026-94053 and CVE-2026-77185, affect applications embedding the library. Administrators are urged to upgrade their Java applications promptly to patched versions.