PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch
- Between October 16 and 23, 2026, PHP, Node.js, GitLab, LiteLLM, OpenCode and the eMudhra certificate authority all had serious security incidents.
- PHP, Node.js and GitLab shipped fixes on October 21, the same day the bad LiteLLM release went out.
- Every advisory ended with some version of upgrade, rebuild or rotate.
Unverified
- Between October 16 and 23, 2026, PHP, Node.js, GitLab, LiteLLM, OpenCode and the eMudhra certificate authority all had serious security incidents.
- PHP, Node.js and GitLab shipped fixes on October 21, the same day the bad LiteLLM release went out.
- Every advisory ended with some version of upgrade, rebuild or rotate.
Sources: Cloudsleuth