{
  "id": 17753386,
  "title": "ipt's OSS October 2026 Updates: PHP2Shell, GitLab, eMudhra, Run:ai, OPA, llm-d, and Pi",
  "url": "https://urgent.news/2026/11/02/ipts-oss-october-2026-updates-php2shell-gitlab-emudhra-run-ai-opa-llm",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-02T05:47:14.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/ipt/ipts-oss-october-2026-updates-php2shell-gitlab-emudhra-runai-opa-llm-d-and-pi-1gb0"
  },
  "original_language": "en",
  "account": null,
  "summary": "The October 2026 Open Source Security Updates report highlights several critical vulnerabilities affecting widely-used software projects. PHP released emergency security updates addressing two critical vulnerabilities, collectively called PHP2Shell, which can lead to unauthenticated remote code execution. Both vulnerabilities affect the PHP runtime itself and not just specific applications or frameworks, making it crucial to update the interpreter for all users. GitLab also experienced a critical security update in October, releasing patches for two integer overflow vulnerabilities in the CI/CD regular-expression compiler. These vulnerabilities could lead to remote code execution on the GitLab server and have a maximum CVSS score of 10.0. The report also covers other notable updates, including NVIDIA open-sourcing its Run:ai platform, llm-d reaching version 1.0, and Pi demonstrating the potential of lightweight, extensible AI agents.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}