Transitive dependency Archives - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Full-Stack EOL Security: Protecting Every...

Key takeaways: Unsupported components can create risk far beyond the package an organization is actively tracking, because hidden transitive dependencies can remain exposed deep within the software supply chain. Tools...

Ghosts in the Machine: Tampering...

In horror movies, the scariest threats aren’t the ones kicking down the front door – they’re the ones already inside, the ghosts hiding in the walls that nobody noticed. Modern...