PHP, Node.js and LiteLLM Face a Wave of Security Trouble
A cluster of software security problems has put websites and developer tools at risk.
A cluster of software security problems has put websites and developer tools at risk. Government sites around the world went offline after critical PHP vulnerabilities emerged, while Node.js patched four high-severity flaws and the LiteLLM project disclosed a compromise.
The incidents came to light on Wednesday, according to available reports. The U.S. National Security Agency advised organizations running PHP to update immediately or take affected systems offline until they could do so. Reuters reported the government website outages, which followed the discovery of the PHP vulnerabilities with the help of AI.
Separate flaws in Node.js
Node.js, the open-source JavaScript runtime used to run applications and tools, issued an update fixing four high-severity vulnerabilities. One flaw could allow remote code execution, meaning an attacker could potentially run commands on a vulnerable system.
Two other bugs could let attackers bypass TLS validation. Those checks help confirm that a server is the one it claims to be; evading them can undermine a connection’s security. Available reports did not specify how widely the flaws had been exploited or how many systems were affected.
The PHP and Node.js issues are separate, but their close timing has added to the workload for security teams responsible for keeping online services patched. The NSA’s advice on PHP underscores the urgency: organizations unable to update should take systems offline rather than leave them exposed.
LiteLLM also reports a compromise
LiteLLM, an open-source proxy that routes requests among different large language model providers, was also compromised in an attack. The available details do not describe the method, scope or impact of that breach.
For teams using the affected software, the immediate priority is to review vendor and project advisories and apply the relevant fixes. The next question is whether investigators or maintainers disclose further details about the LiteLLM compromise and the reach of the PHP and Node.js vulnerabilities.
