Groups > comp.lang.php > #19620

Re: PHP Releases Urgent Fixes For Two Dangerous Flaws

From	"J.O. Aho" <user@example.net>
Newsgroups	comp.lang.php
Subject	Re: PHP Releases Urgent Fixes For Two Dangerous Flaws
Date	2026-10-27 12:24 +0100
Message-ID	<nkbfurFkb5sU1@mid.individual.net> (permalink)
References	<6ADA3B7B.4930.com21237@bbs.alt119.net> <nk3c5eFag0nU1@mid.individual.net> <11bpmfi$1b04u$1@dont-email.me>

Show all headers | View raw

On 27/10/2026 09.13, Arno Welzel wrote:

> We will see many more vulnerabilities like this in the future, since AI
> tools makes it much easier to do analysis which would take weeks or
> months otherwise.

The LLMs are getting better on it, far better than before when they just 
hallucinated a lot of issues.

> Next victim: the Brotli decoder invented by Google which is available
> for Node.js and many other environments:
> 
> <https://research.jfrog.com/post/brotli2shell-beyond-node2shell-and-http2shell/>

yeah, that came a bit of as a topping on the cake.

Let see what next week will bring us.

-- 
  //Aho

Back to comp.lang.php | Previous — Previous in thread | Find similar | Unroll thread

Thread

PHP Releases Urgent Fixes For Two Dangerous Flaws "Internetado" <internetado@bbs.alt119.net> - 2026-10-22 13:36 -0300
  Re: PHP Releases Urgent Fixes For Two Dangerous Flaws "J.O. Aho" <user@example.net> - 2026-10-24 11:30 +0200
    Re: PHP Releases Urgent Fixes For Two Dangerous Flaws Arno Welzel <usenet@arnowelzel.de> - 2026-10-27 09:13 +0100
      Re: PHP Releases Urgent Fixes For Two Dangerous Flaws "J.O. Aho" <user@example.net> - 2026-10-27 12:24 +0100

csiph-web