GoKawiilPHP, Node.js, GitLab, LiteLLM Patch Critical Flaws in Same Week
Between October 16 and 23, 2026, PHP, Node.js, GitLab, LiteLLM, OpenCode and the eMudhra certificate authority each disclosed serious security incidents. PHP, Node.js and GitLab all shipped fixes on October 21, the same day a bad LiteLLM release was pushed out. Amazon's MadPot honeypots recorded attempts to exploit the PHP flaws four days before they were publicly disclosed.