php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

webpack Vulnerabilities Can Outlive the...

Key Takeaways Build tools create production risk even when they never ship as application runtime code. webpack publishes no LTS branches, and fixes arrive in the active 5.x line rather...