Patch reference
| Severity | What | Fix |
|---|---|---|
| Critical | GitLab CI regex RCE, KEV 29 Oct | GitLab 19.5.3 19.4.5 19.3.7 19.2.1019.1.10 19.0.11 18.11.14 |
| High | WordPress upgrade-window RCE, 28 Oct | WordPress 7.1.4, backports to 4.7.39 |
| High | Linux kernel CVE-2026-46300, KEV 28 Oct | Your distribution's kernel; upstream 7.0.10 6.18.336.12.91 6.6.141 6.1.174 5.15.208 |
| Not rated | Claude Code extension in Cursor, 29 Oct | Check for the svc-telemetry key; remove any 2.1.312 or 2.1.313 from Cursor's marketplace |
| Medium | Symfony Mime header injection, 28 Oct | symfony/mime 8.1.10 7.4.22 6.4.49 5.4.55 |
| Critical | PHP2Shell, KEV 26 Oct carried over | PHP 8.5.12 8.4.27 8.3.36 8.2.35 |
| Critical | Brotli CVE-2026-111497, KEV 27 Oct carried over | Brotli 1.2.1; Node 26.12.1 24.22.1 22.23.4 |
| Critical | Laravel TokenGuard, 19 Oct carried over | laravel/framework 13.29.0 12.68.011.56.1 10.50.4 |
What happened this week
GitLab CI regex RCE now exploited
CISA added CVE-2026-97229 to its exploited list: a crafted CI/CD regular expression lets an unauthenticated user run code on the server. A second CVSS 10.0 regex RCE, CVE-2026-110264, reaches back to GitLab 7.0. Ruby 4.0.9, 3.4.12 and 3.3.13 carry the fixes for the underlying regex bugs.
Do thisupgrade to the 29 Oct patch for your line, which includes both fixes and also removes trust in the compromised eMudhra intermediate certificates (CVE-2026-111943). Update self-managed GitLab Runner to 19.5.1 separately, then run GitLab's published threat detections on self-managed instances.
Sources GitLab 19.4.2 · GitLab 19.5.1 · GitLab 19.5.3 · NVD · CISA KEV · Ruby
WordPress 7.1.4 fixes an upgrade-window RCE
CVE-2026-119977 affects 4.7 through 7.1.3: predictable, web-accessible staging paths let an unauthenticated attacker run code while a core upgrade is in progress. The release also fixes several stored XSS bugs and refreshes bundled root certificates after eMudhra.
Do thisconfirm you are on 7.1.4 or your branch's backport; 7.0.8, 6.9.11, 6.8.12, 4.9.35, 4.8.34 and 4.7.39 all shipped on 28 Oct.
Sources WordPress · Release archive · NVD (score from Wordfence)
Linux kernel bug can chain with PHP2Shell
CVE-2026-46300 could allow unintended changes to page-cache-backed data. CISA says it can be chained with PHP2Shell to plant PHP webshells and run commands as root.
Do thisinstall your distribution's kernel update and reboot. Containers share the host kernel, so patch the host.
Sources NVD · CISA KEV · Debian
Tampered Claude Code extension in Cursor's marketplace
From 02:27 to 13:35 PT, Cursor's marketplace served modified Anthropic.claude-code 2.1.312 and 2.1.313 for Windows and macOS. They add an attacker SSH key and persistence, and report host details. Cursor says the attacker's server is offline and no other extension was tampered with.
Do thisif you installed or updated in that window, run Cursor's check, then its remediation script, and rotate credentials from a trusted machine.
Sources Cursor · StepSecurity (vendor research)
Symfony's Mime fix only shipped now
Medium · 28 Oct · CVE-2026-45070
Symfony says the versions it named in May, 5.4.52, 6.4.40, 7.4.12 and 8.0.12, never contained this email header injection fix. It first shipped in 5.4.55, 6.4.49, 7.4.22 and 8.1.10.
Do thisupgrade if your app builds Mime headers with parameter names from user input; 8.0 is unmaintained, so move to 8.1.10. GitHub's advisory still lists the old versions, so go by Symfony's post.
Sources Symfony · CVE-2026-45070 · GHSA-vqc8-7275-q272
Carried over: PHP2Shell and Brotli now exploited
CISA listed both PHP2Shell CVEs on 26 Oct and the Brotli decoder bug on 27 Oct, so last week's patches are now urgent. Brotli reaches beyond Node: anything that bundles the decoder needs 1.2.1 or a vendor fix.
Do thisif you have not applied the W43 patches, apply them now, and rebuild images so they pick up the patched library.
New since W43
- PHP suggests
session.upload_progress.enabled=0until its next bugfix release. CVE-2026-115560 needs a runtime switch ofsession.serialize_handlerback tophp; apps that never change it are unaffected. - PHP rebuilt its Windows packages for Brotli: 8.5.12-1, 8.4.27-1, 8.3.36-1 and 8.2.35-1. The runtime versions are unchanged.
- Symfony's 28 Oct changelogs list CVE-2026-109413, CVE-2026-108082 and CVE-2026-109449 again, but change nothing for them. W43's versions stand.
- Laravel's TokenGuard fix is also in v10.50.4 and v11.56.1, which the advisory does not list. Both lines are past security support, so treat these as a stopgap.
Sources CISA KEV · php.net, session · php.net, Windows · Brotli 1.2.1 · oss-security · Laravel PR #62177 · Laravel support policy
Next week: Next.js on 3 Nov
Next.js will publish fixes for seven medium vulnerabilities on Tuesday 3 Nov; details arrive with the release.
Sources Next.js
Supply chain advice for CLI agent users
- Check where each extension came from; the same name can differ between marketplaces.
- Treat AI gateways as credential stores; one bad release exposes every provider key.
- Update MCP servers reachable over HTTP; stdio-only servers are not affected by the SDK bug below.
Agent tooling to check (4)
| When | Item | Check |
|---|---|---|
| 27 Oct | LiteLLM Enterprise file read | 1.103.10, 1.104.8, 1.105.6 or 1.106.5 |
| 26 Oct | Claude Code Edit tool | Use 2.1.251 or later |
| 21 Oct | litellm 1.107.0 on PyPI and Docker |
Rotate credentials if installed |
| 15 Oct | MCP TypeScript SDK limits | sdk 1.30.1 or later |
GitHub also published 190 malware advisories from 26 to 31 Oct: 168 npm and 22 PyPI. Browse them.
The litellm 1.107.0 row rests on a community issue and StepSecurity research, not a formal advisory.
One-minute self-check
# Compare each version with the patch table above
$ uname -r
$ php -v
$ wp core version
$ composer show laravel/framework
$ composer show symfony/mime
$ sudo gitlab-rake gitlab:env:info
# macOS, Cursor users: a match means affected
$ grep -s svc-telemetry ~/.ssh/authorized_keys