PHP is patched, everyone already knows about php2shell 😅
But today isn’t over:
GitLab self-managed: there’s a CVSS 10 unauthenticated RCE, and the bug has been around since 7.0 🫠 Update to 19.5.1 / 19.4.3 / 19.3.6 and the matching patches for your branch
Node: 10 CVEs, 4 of them high (TLS, DNS, brotli). Upgrade your 22/24/26. If you’re still on Node 20, it’s EOL and getting no patch
Wednesday is officially patch day ☕
commit 8adcb0c