### [2026-10-21](/feed/2026/10/21/index.md)

##### Black October
#  A critical security flaw, allowing for remote code execution, in 12 years of GitLab versions is disclosed, requiring updates. 




### Sources:

1. [The Hacker News](https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html)

### Related:

1. [ Open-source artificial intelligence gateway LiteLLM is compromised by attackers, who push a malicious version of LiteLLM to the Python Package Index. ](/feed/2026/10/21/open-source-artificial-intelligence-gateway-litellm-is-compromised-by-attackers-who-push-a-malicious-version-of-litell.md) _Context: Black October_
2. [Node.js releases three security updates to 10 different vulnerabilities, including 4 deemed high-severity, which affect how it handles DNS resolution, TLS handshakes, and Brotli decoding. ](/feed/2026/10/21/nodejs-releases-three-security-updates-to-10-different-vulnerabilities-including-4-deemed-high-severity-which-affect.md) _Context: Black October_
3. [ A critical vulnerability in PHP allowing for remote code execution is discovered, causing many websites to temporarily go offline while a security update is pushed the following day. ](/feed/2026/10/20/a-critical-vulnerability-in-php-allowing-for-remote-code-execution-is-discovered-causing-many-websites-to-temporarily.md) _Context: Black October, remote code execution_
4. [ Indian certificate authority eMudhra has its private keys compromised, revealing that some of them were extremely insecure single digit numerals. Major web browser developers Mozilla, Google, and Apple subsequently block the certificates. ](/feed/2026/10/20/indian-certificate-authority-emudhra-has-its-private-keys-compromised-revealing-that-some-of-them-were-extremely-insec.md) _Context: Black October_