"Captain, it's Wednesday": PHP, GitLab, LiteLLM security incidents pile up
HanchungLee · x · 2026-10-22
A Tintin "Captain, it's Wednesday" meme recaps the security incidents already packed into this week:
- PHP: critical RCE, patch may be incomplete
- Node.js: urgent RCE patches
- GitLab: CVSS 10.0 unauthenticated RCE affecting 12 years of releases
- LiteLLM 1.107.0: shipped with credential-stealing malware
- OpenCode Console: leaked users' API keys
- eMudhra CA: private key was literally "4"
"What a week, huh?" — and it's only Wednesday.
Related event: Wave of Critical Flaws Hits PHP, Node, GitLab and LiteLLM(3 posts)→
More from Fun
- Endless Powder launches free on Spawn: endless procedural mountain with a synth-soundtrack snowboard — sterlingcrispin · 2026-10-22
- Procedural soundtrack: snowboard game turns the board into a synthesizer with 15 synced tracks — sterlingcrispin · 2026-10-22
- One audio clock for 15 stems: the arrangement system behind Endless Powder's procedural D&B — sterlingcrispin · 2026-10-22
- Only 25% of snow particles simulated: the particle budget trick behind Endless Powder — sterlingcrispin · 2026-10-22
- A snowboard is a shape, not a point stamp: oriented board projection carves realistic lines — sterlingcrispin · 2026-10-22
- Endless world, bounded budget: how Endless Powder streams terrain at three resolutions — sterlingcrispin · 2026-10-22