Latest Hotfixes · Page 8
Node.js fixed 10 flaws, 4 are High, so upgrade now
Node.js 22.23.4, 24.22.1 and 26.12.1 fix 10 vulnerabilities (4 High). How each line is hit, what behaves differently now, and the copies a server update misses.
Private keys fell in a few tries, so browsers blocked 8 CAs
Eight intermediate CAs had keys below 256, and browsers blocked the key itself within hours. Tools and servers need manual updates; G3 root removal lands today.
PHP2Shell hacks servers with no login, is yours affected?
Two PHP flaws (CVSS 9.2) strike before any login check. Timeline, runtime differences, how to check your server, patches, stopgaps, and signs of past attacks.