ipt's OSS October 2026 Updates: PHP2Shell, GitLab, eMudhra, Run:ai, OPA, llm-d, and Pi
Welcome back to our Open Source Monthly Updates! October was a particularly busy month for security. PHP and GitLab suffered critical vulnerabilities that allow remote code execution, while a certificate authority incident raised uncomfortable questions about how much we can trust TLS connections. Fortunately, there is also good news. NVIDIA open-sourced its Run:ai platform, llm-d reached version…
The October 2026 Open Source Security Updates report highlights several critical vulnerabilities affecting widely-used software projects. PHP released emergency security updates addressing two critical vulnerabilities, collectively called PHP2Shell, which can lead to unauthenticated remote code execution. Both vulnerabilities affect the PHP runtime itself and not just specific applications or frameworks, making it crucial to update the interpreter for all users.
GitLab also experienced a critical security update in October, releasing patches for two integer overflow vulnerabilities in the CI/CD regular-expression compiler. These vulnerabilities could lead to remote code execution on the GitLab server and have a maximum CVSS score of 10.0. The report also covers other notable updates, including NVIDIA open-sourcing its Run:ai platform, llm-d reaching version 1.0, and Pi demonstrating the potential of lightweight, extensible AI agents.
Brief written by urgent.news from Dev.to's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
