PHP 昨日揭露新漏洞 CVE-2026-115560。官方說要三個條件同時成立才會中，預設設定不符合；但目前還沒有修補版，尚未關掉 session 上傳進度的站長，建議現在補上。 （前情提要：OpenAI GPT‑5.6 Sol 揪出 PHP ...

The Node.js Project released security updates on October 21, 2026, addressing ten vulnerabilities across its 26.x, 24.x, and ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell" ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix TLS verification bypasses, a Brotli decoder bug and a repeated-random-value issue in ...

Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, ...

Recently, there have been fewer topics about Even G2. Meanwhile, a "critical PHP vulnerability" has become a hot topic!

A security update released October 21 fixes ten vulnerabilities across Node.js 26.x, 24.x, and 22.x, including an out-of-bounds write in the Brotli decompression library.

A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...

How can a single script compromise both user data and transfer funds?Article author and source: SlowMist TechContextRecently, ...