Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

JFrog

How TuxCare and JFrog Are...

Key Takeaways SecureChain fixes will be available inside JFrog Zero-Touch Remediation, applied without a version bump. Detection was never the hard part; producing and delivering a non-breaking fix always was....

TuxCare Joins JFrog’s Self-Healing Software...

TuxCare’s SecureChain technology brings continuously maintained, source-rebuilt open-source packages to JFrog Zero-Touch Remediation, helping organizations automatically resolve vulnerabilities long after upstream support ends  PALO ALTO, Calif. – September 2, 2026...

LofyGang distributes 199 trojanized NPM...

The software security company Checkmarx has uncovered the malicious activities of the threat actor LofyGang, which distributes trojanized and typosquatted packages on the NPM open source repository. Security researchers discovered...