php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Node.js Vulnerabilities: Top Risks &...

Key Takeaways Node.js vulnerabilities enter through three vectors: the runtime, npm dependencies (including transitive ones), and misconfigured HTTP, TLS, or filesystem APIs. Path traversal, prototype pollution, ReDoS, and HTTP/2 DoS...

Oops, Your AI-Generated Dockerfile Has...

Uh oh – you asked an LLM to generate your Dockerfile, and now you’re staring at an error about Node. Turns out the base image it gave you includes a...