The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Following a critical PHP vulnerability, Node.js also releases a fix. What is happening now, and how to check your PHP, Node.js, and Python versions to …

Just as domestic services were shutting down one after another due to a critical PHP vulnerability, Node.js also released a ...
Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
Cyber Security News

October 21 Cybersecurity Nightmare: PHP and Node.js Flaws, LiteLLM Backdoor, and Active Attacks

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...

The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...
ABS-CBN on MSN

PHP, Node.js, eMudhra, and LiteLLM lead busy week for security teams

Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...