Ready yourselves to patch your PHP environments.
Also per reading, Node and Go have related CVEs and patches coming soon.
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases
https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html
The PHP security team would like to give advance notice of an upcoming security release. It is scheduled for Wed, Oct 21st 2026 at 14:00 UTC. It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2. All PHP users are encouraged to prepare to update.
Earlier release…
nodejs.orgNode.js — Wednesday, October 21, 2026 Security ReleasesNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
commit cb186df