Patch reference
| Severity | What | Fix |
|---|---|---|
| Critical | GitLab, bundled git, 10 Nov | GitLab 19.5.4 19.4.6 19.3.8 |
| Critical | React Server Components RCE, disclosed 10 Nov | react-server-dom-* 19.0.9 19.1.10 19.2.9 19.3.1 |
| Critical | Apache HTTP Server mod_http2, 11 Nov | httpd 2.4.71 |
| Critical | GPUStack auth bypass, KEV 9 Nov | GPUStack 2.2.0 |
| High | Node.js, 16 issues, 11 Nov | Node.js 26.13.1 24.22.3 22.23.5 |
| High | Composer, 3 advisories, 10 Nov | Composer 2.11.2 2.2.32 |
| High | OpenSSH password bypass, KEV 9 Nov | OpenSSH 10.6p2 or your distribution's package |
| High | Chrome CVE-2026-125350, KEV 10 Nov | Chrome 157.0.8103.50 or later |
| High | mcp-server-git config command execution, 11 Nov |
mcp-server-git 2026.11.11 |
| Medium | Laravel signed URLs, 2 advisories, 11 Nov | laravel/framework 12.72.0 13.41.0 |
| Medium | nginx, 5 advisories, 14 Oct carried over | nginx 1.30.6 1.31.7 or later |
| Malware | @ethersphere/bee-js 13.3.0, 9 Nov |
bee-js 13.2.0, Swarm Desktop 0.56.3 |
What happened this week
GitLab fixes a critical bug in its bundled git
Critical · 10 Nov · CVE-2026-105437
GitLab's critical patch release updates the git it ships. Under conditions GitLab does not spell out, a heap buffer overflow in git can be used to run commands in the Gitaly environment. Every version from 16.2 is affected. GitLab does not report exploitation. GitLab.com and Dedicated are already patched.
Only 19.5, 19.4 and 19.3 received the fix, so the 29 Oct versions from W44 and W45 are no longer enough, and lines older than 19.3 must move up. The 12 Nov releases, 19.5.5 and 19.4.7, are bug fixes with no security content.
Do thisupdate to 19.5.4, 19.4.6 or 19.3.8 (or 19.5.5, 19.4.7). On a self-compiled install, also rebuild Gitaly's embedded Git and the Git that git.bin_path points at; a distribution Git must be 2.56.1 or patched by your distribution. GitLab added a threat detection for self-managed instances named "Git merge-tree child process crash".
Sources GitLab 19.5.4 · GitLab 19.5.5 · GitLab patch feed
React discloses a Server Components RCE
Critical · CVSS v4 9.5 · disclosed 10 Nov · CVE-2026-126187
Crafted payloads sent to frameworks that support React Server Components can lead to remote code execution. React rates it 9.5, with three limits that decide whether you are exposed:
- It only affects rare cases where a response carries multiple typed arrays together with an attacker-controlled value.
- React code that does not use a server is not affected.
- Apps that do not use a framework, bundler or bundler plugin supporting Server Components are not affected.
The fixed react-server-dom-webpack, -turbopack and -parcel packages were published to npm on 14 Oct; the advisory was made public on 10 Nov.
Do thisif you use Server Components, check that react-server-dom-* is at 19.0.9, 19.1.10, 19.2.9 or 19.3.1. Frameworks often bundle their own copy, so check your framework's release notes too.
Sources GHSA-xqc2-xf4c-x3h3 · React advisory · npm · StepSecurity (vendor research)
Node.js fixes seven high-severity issues
The release W45 announced is out: 26.13.1, 24.22.3 and 22.23.5. Four high issues are in HTTP/2 session and stream teardown, including one that sends freed memory to the peer. The others: HTTPS re-entrancy can leak memory into response bodies (cleartext node:http is not affected), a deferred TLS handshake callback lets a client crash the process, and TLS 1.2 renegotiation lets a client change servername and bypass client-certificate authentication. 22.x gets four of the seven. llhttp, undici and sqlite were updated too.
Do thisrun node -v and move to the version for your line. Rebuild images that pin a Node.js base, and remember that tools that bundle Node.js need their own update.
Sources Node.js · Node.js releases
Apache HTTP Server fixes a critical mod_http2 bug
Critical · 11 Nov · CVE-2026-119618 · 1 critical, 1 important, 1 low
A race in mod_http2's assign_headers() can lead to remote code execution in 2.4.55 through 2.4.70. Apache rates it critical; the only CVSS score in NVD, added by CISA, is 8.1. 2.4.71 also fixes a mod_md crash (important) and a one-byte stack overwrite in mod_vhost_alias (low). Standalone mod_h2 from 2.0.8 through 2.0.42 is affected too.
Do thisupdate to 2.4.71 or your distribution's fixed package. Debian has DSA-6620-1 for trixie and DLA-4902-1 for bookworm.
Sources Apache httpd · Debian
Composer fixes two high issues
A transport-options.prevent_url_access_callable entry in a composer.lock or installed.json you did not write can run commands (CVSS 8.8, 2.10 and later), and a package zip with symlinked entries can write outside the package directory when unzip falls back to ZipArchive (CVSS 8.8). The medium one sends an inline repository's HTTP credentials to a dist mirror named in the lock file.
Do thisrun composer self-update to 2.11.2, or 2.2.32 on the 2.2 LTS line. None of the three has a CVE number yet.
Sources Composer advisories · Composer 2.11.2 · GHSA-jhfp-4ppm-crmm · GHSA-w6hj-6587-3jh5
Chrome XML bug is exploited
High · KEV 10 Nov · CVE-2026-125350
Chrome 157.0.8103.50 fixes nine security issues, and Google says an exploit for CVE-2026-125350, a use-after-free in XML, exists in the wild. CISA added it on 10 Nov and notes it can affect other Chromium browsers.
Do thisrestart Chrome or Edge to finish the update. Electron apps take Chromium fixes through Electron's own releases.
Sources Chrome Releases · CISA KEV
MCP reference servers fix six issues
The most serious: mcp-server-git runs programs a repository's own .git/config names, such as core.fsmonitor, even from its read-only tools. Another advisory says the late-October repository confinement fix was incomplete. server-filesystem gets two symlink and rename race fixes, and mcp-server-fetch two small guard fixes.
Do thisupdate mcp-server-git and mcp-server-fetch to 2026.11.11, and @modelcontextprotocol/server-filesystem to 2.3.0. Until then, point mcp-server-git only at repositories you trust.
Sources GHSA-6hqx-gqrx-c5r2 · GHSA-q74p-4wrc-q7w6 · MCP servers advisories
Malicious bee-js release on npm
Malware · 9 Nov
@ethersphere/bee-js 13.3.0 was on npm for about 75 minutes, and Swarm Desktop 0.56.2 was offered as an auto-update until about 09:14 UTC the same day. Both fetched and ran code from an attacker server; Socket reports the payload sent Swarm node keys to the attacker and installed a backdoor.
Do thispin bee-js to 13.2.0 and purge cached copies. If 13.3.0 was installed with scripts enabled, rotate credentials reachable from that machine. Swarm Desktop users move to 0.56.3, and assume the node key was stolen.
Sources GHSA-hh7j-5m3j-23pf · Socket (vendor research) · Swarm Desktop releases
Other items
- nginx has posted nothing since 1.31.8 on 21 Oct; the 14 Oct versions, 1.30.6 and 1.31.7, still stand.
- GPUStack's authentication bypass (CVE-2026-102895), fixed in 2.2.0 since July, entered CISA KEV on 9 Nov with forensic checks required.
- OpenSSH 10.6p2 (5 Nov) fixes a password authentication bypass in sshd on Linux when musl libc is used without PAM, such as Alpine; CISA added CVE-2026-123158 on 9 Nov. OpenSSH does not say other setups are safe, so update anyway.
- Laravel 12.72.0 and 13.41.0 (11 Nov) fix two medium bugs that let an expired temporary signed URL be accepted. Laravel notes default nginx and Apache limits already reject the long URL one of them needs.
- Symfony has posted nothing since its 4 Nov batch, and php.net no security release this week.
Sources nginx · GHSA-v5ch-g375-82r6 · GHSA-6rv8-qj5v-p8ch · php.net · GHSA-gj9m-f8ph-pmhr · OpenSSH · CISA KEV
Supply chain advice for CLI agent users
- Treat a cloned repository's
.git/configas code; git can run programs it names, and an agent's read-only git tool is no exception. - Do take-home tests in a throwaway VM; StepSecurity traced npm packages from a fake interview campaign that stayed installable for up to seven months.
- Update the Node.js inside your tools; CLI agents and desktop apps that bundle Node.js do not pick up a system update.
Agent tooling to check (3)
| When | Item | Check |
|---|---|---|
| 11 Nov | mcp-server-git config command execution |
2026.11.11 or later |
| 11 Nov | server-filesystem symlink and rename races |
2.3.0 or later |
| 11 Nov | mcp-server-fetch guard fixes |
2026.11.11 or later |
The fake interview packages were Tailwind plugins such as tailwind-lines-clamps and tailwind-lineclamp, and their loader runs when the config loads, not at install. All were removed by 13 Nov. StepSecurity (vendor research). GitHub also published 1,236 malware advisories from 9 to 15 Nov: 1,186 npm, 41 PyPI, 5 RubyGems and 4 crates. Browse them.
One-minute self-check
# Compare each version with the patch table above
$ sudo gitlab-rake gitlab:env:info
$ npm ls react-server-dom-webpack react-server-dom-turbopack react-server-dom-parcel
$ node -v
$ httpd -v || apache2 -v
$ composer --version
$ composer show laravel/framework
$ ssh -V
$ npm ls @ethersphere/bee-js
$ pip show mcp-server-git mcp-server-fetch
$ nginx -v