php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

ELS for Jackson: What Jackson...

Key Takeaways Jackson EOL expands your risk surface: Jackson Databind depends on Jackson Core, which has real CVE history, so EOL leaves the JSON parsing layer exposed. Rushed upgrades are...