Well, now that's PHP is patched (right?) it's time to notice the other issue from yesterday: RCE in NodeJS https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high