Notes from building backends that run on their own.
Backend, automation, design patterns and systems. Written plainly, with real code.
Featured · BackendCVE-2026-96889: when an SVG upload can free memory your parser still needsA backend engineer's read of the librsvg use-after-free in nested XInclude parsing, which systems quietly render SVG, how to check what you run, and what to do before you can patch.16 Oct 2026 · 5 min read