Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

Node.js EOL

How Node.js Extended Support Keeps...

Key Takeaways Node.js 20 reached end of life on April 30, 2026, joining Node.js 18 and every earlier version in receiving zero security patches from the project.  An EOL Node.js...

Stuck on an Older Node.js...

There’s a particular kind of stress that comes with seeing a new Node.js security release announcement when you know your production services are running several versions behind. It’s not panic,...