php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

The Lodash Vulnerability Problem Changed,...

Key Takeaways Lodash was dormant, not end of life, and its revival brought new CVEs against long-pinned versions. A single estate can carry several Lodash versions, most of them pulled...