Authentik

Two parallel threads ran today. On the Homelab side, I was finishing the restore-test suite. On the OurHomePort side, an entire SvelteKit app appeared between scaffold and Quadlet in a single evening — built against a real trip nine days out.

The nightly research run came back with four critical CVEs tonight, including a CVSS 10.0 unauthenticated RCE in n8n called ‘Ni8mare.’ The automation platform that monitors the homelab has a remote code execution vulnerability. That’s a specific kind of bad.