Kai Ole Hartwig

Advisories

Security advisories for the stack I run myself. TYPO3, PHP and Composer, FrankenPHP, Sylius, GitLab, nginx and the npm supply chain. What's here affects my own systems. You'll find the broader analysis and longer pieces on the blog.

Blog

All posts
05 Nov 2026
Linux kernel CVE-2026-31695 (virt_wifi)
CVE-2026-31695 · CVSS 7.8 · Linux kernel 5.15 up to before 6.19.12 · Fix 5.15.203 / 6.1.168 / 6.6.134 / 6.12.81 / 6.18.22 / 6.19.12
→02 Nov 2026
Linux kernel CVE-2026-46300 (Fragnesia)
CVE-2026-46300 · CVSS 7.8 · Linux kernel before the May 2026 stable releases · Fix 7.0.10 / 6.18.33 / 6.12.91 / 6.6.141 / 6.1.174 / 5.15.208 / 5.10.257
→31 Oct 2026
Linux Kernel CVE-2026-98432 (TCP Handshake UAF)
CVE-2026-98432 · CVSS 9.8 · Linux kernel 4.4 and later before 5.10.272 / 5.15.223 / 6.1.190 / 6.6.159 / 6.12.113 / 6.18.56 / 7.2.10 · Fix e3f33b0a1d89
→27 Oct 2026
Traefik CVE-2026-114640 (mTLS header spoofing)
CVE-2026-114640 · CVSS 8.7 · Traefik 3.7.0 to 3.7.13 · Fix 3.7.14
→26 Oct 2026
LiteLLM 1.107.0 (Startup-Hook Stealer)
No CVE · supply-chain compromise · litellm 1.107.0 (PyPI, Docker Hub, GHCR) · clean: 1.106.2
→22 Oct 2026
Go CVE-2026-111943 (crypto/x509)
CVE-2026-111943 (GO-2026-6809) · CVSS 6.8 (Amazon) · Go before 1.26.10 and 1.27.0 to 1.27.2 · Fix 1.26.10 / 1.27.3
→22 Oct 2026
PHP CVE-2026-109618 (PHP2Shell)
CVE-2026-109618 / CVE-2026-109619 · CVSS 9.2 · PHP 8.2 to 8.5 · Fix 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12
→22 Oct 2026
GitLab CVE-2026-110264 (Org mode RCE)
CVE-2026-110264 · CVSS 10.0 · GitLab CE/EE from 7.0 before 18.11.13/19.0.10/19.1.9/19.2.9/19.3.6/19.4.3/19.5.1 · Fix 19.5.1
→22 Oct 2026
eMudhra CVE-2026-111943 (CA keys)
CVE-2026-111943 (Go) · no CVSS for the CA incident · 8 eMudhra intermediates (ECDSA P-384) · Fix: trust store updates, Go 1.27.3/1.26.10
→22 Oct 2026
Node.js CVE-2026-111497 (Brotli decoder)
CVE-2026-111497 · CVSS pending (Node.js: high) · Node.js 22, 24, 26 · Fix 22.23.4 / 24.22.1 / 26.12.1
→20 Oct 2026
Linux kernel CVE-2026-80521 (AF_UNIX GC)
CVE-2026-80521 · CVSS 7.8 · Linux kernel 6.10+ and 6.1.141+ / 6.6.93+ before 6.1.189 / 6.6.158 / 6.12.111 / 6.18.53 / 7.1.10 · Fix 594d90519502
→19 Oct 2026
Linux kernel CVE-2026-99999 (PwnEscape)
CVE-2026-99999 · CVSS 9.3 · Linux kernel from 2.6.27 before 5.10.272 / 5.15.223 / 6.1.190 / 6.6.159 / 6.12.113 / 6.18.57 / 7.2.11 · Fix 6785011f8b16
→
Contact

Sounds like a fit?
Then write to me.

No form marathon, no sales funnel. A short message — I get back to you personally and tell you honestly whether I can help.

Book a call