Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

Jquery

jQuery Vulnerabilities: CVEs, Security...

Key Takeaways Most jQuery risk comes from old versions still sitting in production, not from anything newly discovered. XSS dominates the list through CVE-2020-11022, CVE-2020-11023, and CVE-2015-9251, with prototype pollution...

When jQuery Reaches End of...

Key Takeaways Longevity created the lifecycle problem. jQuery 1.x and 2.x are EOL with no upstream patches, and every jQuery release before 3.5.0 carries at least one XSS CVE that...