/
vendors:"Y Combinator" × limpar

Resultados

2 casos · pág. 1/1

aikido.dev · · 2 fontes · 2 atualizações critical

PHP leaked critical RCE flaws CVE-2026-109618 and CVE-2026-109619 (php2shell): patches due Oct 21, all versions treated as affected

Aikido warns that two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affect PHP itself, and it advises treating all versions as affected. Both are rated CVSS v4.0 9.2. The PHP security team will release fixes at 14:00 UTC on October 21, 2026. Aikido is coordinating the disclosure with the PHP Foundati…

infosecurity-magazine.com · high

OpenCode Console breach via legacy system may expose OpenAI, Anthropic and Google API keys

OpenCode, the open-source AI agent framework developed by Anomaly, confirmed on October 17 a security breach that occurred the night before and affected its Console service. Console stores each workspace's third-party AI provider credentials centrally. About 1.4% of Console users, those with external providers linked, may have had OpenAI,…