Back to articles
DevPickView feed
Hacker NewsHN submitter: bigfish2026
Original published:

PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch

AI summary
Editorial policy

Fixes have been released for critical security issues including PHP2Shell, a CVSS 10 GitLab bug, and a backdoored LiteLLM, prompting users to identify affected resources.

Key points

  • •Fixes are available for PHP2Shell, a Node.js RCE, a CVSS 10 GitLab bug, a backdoored LiteLLM, and a CA key issue.
  • •Patches for these vulnerabilities have been released.
  • •The article challenges readers to find every affected resource.
Read the original(opens in a new tab)
#Security & Misuse#PHP2Shell#LiteLLM#GitLab

Related articles

See more
CodeZine

Development breaks down as AI fills in interpretations: The measures CloudAce took to ensure 'intent does not disappear'

CloudAce's Takano discussed how to preserve design intent lost in rapid AI-assisted development by recording it as 'Software DNA' and verifying it with GitLab CI and Duo Agent Platform.

CodeZine

Production incidents increase by 242% due to generative AI utilization - Sony Group's perspective on 'control and freedom' in the AI era

Sony Biz Networks presented a strategy for operating AI-driven development within strict security standards, explaining that while review effort was cut by 50%, production incidents increased by 242%.

TechCrunch

The internet is having a very bad cybersecurity day

Cybersecurity teams face significant challenges this week due to AI-discovered PHP vulnerabilities and flaws in Node.js and the popular AI tool LiteLLM.

Hacker News

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

LiteLLM 1.107.0 on PyPI contains a .pth credential stealer and a sitecustomize.py backdoor that execute on every Python start, detailing the intrusion and indicators of compromise.

CodeZine

CVE disclosures reach 10,000 per month: How is the Agency for Digital Transformation addressing security challenges in the era of frontier AI?

The Agency for Digital Transformation is providing a development platform that standardizes security checks in CI/CD pipelines, driven by the crisis that government procurement models cannot keep up with the speed of vulnerability disclosures.