Industry updates

Security Advisories

Security advisories bundles official advisories from CERT-EU, CISA and GitHub on critical vulnerabilities in programming languages, frameworks, libraries and infrastructure, from PHP and GitLab to supply-chain attacks on package ecosystems. Each report is summarised from the original with affected products, severity and a link to the advisory.

Service: architecture audit for grown systems

Security Advisories Oct 23, 2026

PHP releases fixes for two critical remote-code-execution flaws

The PHP project has released security updates addressing two critical vulnerabilities that can enable unauthenticated remote code execution. Fixes are available for PHP 8.5, 8.4, 8.3 and 8.2.