On October 21, the PHP and Node.js projects each released urgent security fixes. PHP. The PHP project released emergency updates (PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35) for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. These could allow an attacker to run commands on a vulnerable server. Security ...