Yesterday, emergency patches for 4x #Node.js, 2x #PHP vulnerabilities were released, and last week there were 3x for #Nginx.
High - Node.js
- CVE-2026-111497 (Brotli decoder out-of-bounds write)
- CVE-2026-105482 (DNS truncation bug)
- CVE-2026-105483 (TLS certificate hostname
elephc v0.27.4 is out, with ~20 performance wins and a native test runner 🐘
• `elephc test`: run your tests natively
• Full BCMath, BcMath\Number included
• PHP 8.5 classes & constants complete
• Tail recursion compiled to loops
• FFI: explicit C int widths + f32
elephc 0.27.3 is out 🐘
New: `elephc repl`, an interactive PHP session. Variables, functions, classes and constants persist across lines.
Native generics now work in eval() and in the REPL too.
Also: preg_match_all() with all flags, a smarter optimizer, and 137 commits since
