Amzu Security Briefing — Weekly 26 Oct

Amzu Security Briefing — Weekly 26 Oct – 1 Nov 2026

Amzu Information Technology Ltd

Security Briefing

Weekly edition · 26 Oct – 1 Nov 2026 · Europe/London

WEEKLY

Forwarded this? Get the briefing yourself: Subscribe

Week in review — executive summary

Three updates stood out this week. PHP’s php2shell fixes and the Brotli compression fix in Node.js were both added to CISA’s list of actively exploited vulnerabilities, so these are the updates to make first. A Linux kernel networking flaw (CVE-2026-98432) now has fixed kernels for Amazon Linux and Azure Linux, with Ubuntu’s still on the way — a kernel update and reboot for servers you manage is worth planning this week.

Elsewhere: dependency updates for Node.js (undici, better-auth), Python (Authlib), Go, Java (Keycloak), PHP (Symfony) and Rust, plus fixes for self-hosted AI tools such as MLflow, vLLM and LiteLLM. Vercel, Cloudflare and Google Cloud have handled their side of this week’s issues; there were no new Next.js advisories.

Not sure if this affects you? Reply to this email and we’ll help.

Worth doing first this week

Five useful updates from Mon–Sun. Treat these as a planning list — not a fire drill unless labelled Act now.

Act now Severity: Critical

Update PHP on every web server (php2shell, CVE-2026-109618 and CVE-2026-109619)

What this means for you

Websites built on PHP — including WordPress, Drupal, Laravel and Magento — can be taken over through specially crafted web requests on older PHP versions. CISA added both flaws to its list of actively exploited vulnerabilities on 26 October.

What to do

If your website or any internal tool runs on PHP, ask your developer or IT provider to confirm the live server runs PHP 8.2.35, 8.3.36, 8.4.27 or 8.5.12 (or later). Updating plugins or themes alone does not fix this.

For your engineers

Two memory-safety bugs in the PHP runtime’s error handling: use of uninitialised data after an out-of-memory interruption (CVE-2026-109618) and stale references reused by a later request after a fatal error (CVE-2026-109619). Affects web servers running PHP 5.4 or later. PHP 8.1 and older get no fix from the PHP project — move to a supported branch or ask your LTS vendor. Rebuild container images on patched base images. Vercel and Cloudflare WAF rules block known exploit patterns but do not replace patching. CISA KEV listing date: 26 Oct 2026.

PHP security advisory · GHSA-w8hw-w9fx-j79w · GHSA-6wmf-4rv5-p3rp · CISA KEV · Vercel bulletin

Act now Severity: High

Update Node.js for the Brotli decompression fix (CVE-2026-111497)

What this means for you

A flaw in the Brotli compression library (used to shrink web traffic) can let an attacker crash or take over an app that unpacks compressed data. CISA listed it as actively exploited on 27 October.

What to do

If you run Node.js apps, ask your developer or IT provider to update Node.js to 22.23.4, 24.22.1 or 26.12.1 and redeploy. On AWS, follow the AWS bulletin for Lambda, Elastic Beanstalk and other managed runtimes.

For your engineers

Malformed Brotli input writes past an eight-byte internal decoder buffer; reachable wherever an app decompresses attacker-supplied data with node:zlib. Fixed in the 21 Oct Node.js security releases, which also patch two High TLS hostname-verification bypasses (CVE-2026-105483, CVE-2026-106069) and a DNS NUL-truncation issue (CVE-2026-105482). On 26 Oct PHP published updated Windows builds (8.5.12-1, 8.4.27-1, 8.3.36-1, 8.2.35-1) bundling Brotli 1.2.1, as cURL response decompression can reach the decoder. CISA KEV listing date: 27 Oct 2026.

Node.js security releases · AWS bulletin 2026-155 · PHP Windows builds · CISA KEV

Plan this week Severity: Critical

Schedule a Linux kernel update and reboot (CVE-2026-98432)

What this means for you

A flaw in how Linux handles incoming network connections could let someone on the internet run code on an unpatched server. Researchers showed this working against servers using a feature called Multipath TCP (a way of spreading one connection over several network paths). AWS reports no known attacks so far.

What to do

If you run your own Linux servers or virtual machines, ask your IT provider to install the latest kernel update and reboot. Managed platforms such as Vercel and AWS Lambda need no action from you.

For your engineers

Memory issue in the IPv4 TCP handshake path, triggered by crafted packets carrying IP options; affects kernels 4.4 and later. CVSS 9.8. Fixed upstream in 6.12.113, 6.18.56 and 7.2.10. Amazon Linux 2/2023 kernels are out (ALAS2-2026-4065, ALAS2023-2026-3365 and others); Ubuntu fixes were still pending on 30 Oct. Interim only: net.mptcp.enabled=0 (or GODEBUG=multipathtcp=0 for Go 1.24+ apps) and dropping IPv4 packets with IP options. Hosts behind TCP-passthrough load balancers (AWS NLB TCP listeners, Global Accelerator, PrivateLink) are most exposed.

AWS bulletin 2026-160 · CVE record · Ubuntu status · Vercel bulletin

Act now Severity: High

Finish upgrading GKE Ubuntu node pools (Fragnesia, CVE-2026-46300)

What this means for you

A Linux kernel flaw lets code inside one container break out and gain full control of the host server. CISA listed it as actively exploited on 28 October. Fixed GKE versions have been available since July.

What to do

If you use Google Kubernetes Engine with Ubuntu nodes, ask your cloud engineer to confirm every Ubuntu node pool is on a fixed GKE version. Container-Optimized OS nodes and GKE Autopilot are not affected.

For your engineers

GCP-2026-033. Fixed Ubuntu node versions include 1.32.13-gke.1829000, 1.33.13-gke.1011000, 1.34.9-gke.1131000, 1.35.6-gke.1127000 and 1.36.2-gke.1346000 or later. GKE Sandbox clusters are not affected. For self-managed Linux hosts, apply your distribution’s kernel update. CISA KEV listing date: 28 Oct 2026.

GKE security bulletins · CISA KEV

Plan this week Severity: Critical

Update MLflow servers to 3.17.0 (CVE-2026-116692)

What this means for you

MLflow is a popular tool for tracking machine-learning experiments. Servers reachable without a login can be used to run an attacker’s code or read files.

What to do

If your data or ML team runs an MLflow server, ask them to update it to 3.17.0 and make sure it is not reachable from the internet without a login.

For your engineers

GHSA-26p8-2jq9-3vq9 (CVSS 9.8): third-party scorer deserialization imports a request-controlled module path, which can be chained with the artifact-upload endpoints to load attacker code (introduced in 3.12.0). GHSA-m65p-9j7q-6w33 (High): arbitrary file read via prompt model versions. Both fixed in 3.17.0. Put MLflow behind authentication.

GHSA-26p8-2jq9-3vq9 · GHSA-m65p-9j7q-6w33

By language

Node.js / JavaScript

Plan this week Severity: High

undici — TLS certificate check bypass and cache poisoning

What this means for you

undici is the HTTP client behind Node.js fetch() and many libraries. In some setups it could skip checking a server’s certificate or mix up cached responses between users.

What to do

Ask your developer to update undici to 6.29.1, 7.30.1 or 8.12.2 (matching your major version), and keep Node.js itself on the latest patch release.

For your engineers

GHSA-2m5v-pch6-74hx: TLS options dropped in Agent (validation bypass). GHSA-4w7w-5xrc-9h26: cache poisoning / cross-user disclosure via cross-origin redirects. GHSA-qrxm-fqhp-jwvm: DoS via TLS 1.2 renegotiation. GHSA-qq8j-7v2v-3rwp: WebSocket DoS on 8.11.x (fixed 8.11.2). Check with npm ls undici.

GHSA-2m5v-pch6-74hx · GHSA-4w7w-5xrc-9h26 · GHSA-qrxm-fqhp-jwvm · GHSA-qq8j-7v2v-3rwp

Plan this week Severity: Critical

better-auth — sign-in as another user (CVE-2026-114607)

What this means for you

If your app uses the better-auth login library, an attacker could reuse part of a login flow to sign in as someone else.

What to do

Ask your developer to update better-auth to 1.7.7 or later.

For your engineers

OAuth state value can be used as a magic-link token (CVSS 9.1). Affects >= 1.4.0-beta.18, < 1.7.7.

GHSA-965c-763c-88jm

Good to know Severity: High

node-forge, joi and follow-redirects — routine dependency updates

What this means for you

Three widely used building blocks received fixes for slow-down and credential-leak bugs. These usually arrive through other packages.

What to do

Ask your developer to refresh dependencies so these land at node-forge 1.4.1, joi 17.13.9 / 18.3.1 and follow-redirects 1.16.2 or later.

For your engineers

node-forge: ReDoS in pem.decode (plus further fixes in 1.4.1). joi: quadratic-time split in string().email({ multiple: true }); @hapi/joi has no fix. follow-redirects: custom credential headers could follow cross-origin redirects (1.16.0–1.16.1).

GHSA-7wch-p9px-956x · GHSA-4528-x5fx-h6hg · GHSA-mrwp-f3q8-3g9p

Python

Plan this week Severity: Critical

Authlib — forged sign-in tokens (CVE-2026-96760, CVE-2026-114616)

What this means for you

Authlib handles logins and tokens in many Python apps. Older versions can accept a faked token as genuine.

What to do

Ask your developer to update Authlib to 1.9.1 or later.

For your engineers

GHSA-6v38-4h7w-rj9h (CVSS 9.1): empty signatures accepted in JWS JSON deserialization (fixed 1.9.0). GHSA-8m4g-j4wp-wgcg: empty HMAC key allows HS256/384/512 forgery (fixed 1.9.1). pip install -U "authlib>=1.9.1".

GHSA-6v38-4h7w-rj9h · GHSA-8m4g-j4wp-wgcg

Good to know Severity: Critical

PyPI publishing GitHub Action — update to 1.14.3

What this means for you

Teams that publish Python packages from GitHub should update the publishing step so it no longer trusts certificates from the compromised eMudhra (emSign) authority.

What to do

If you publish to PyPI from GitHub Actions, ask your developer to pin pypa/gh-action-pypi-publish to 1.14.3 or later.

For your engineers

Versions up to 1.14.2 bundled the emSign root via certifi, used by Sigstore for Trusted Publishing and attestations. Related to the eMudhra subordinate-CA key compromise (CVE-2026-111943).

GHSA-5xjx-3w67-w9x9

Plan this week Severity: High

go-jose — crash when reading RSA keys (CVE-2026-116587)

What this means for you

A common Go library for sign-in tokens can be made to stall or crash with a crafted key. Version 4 is fixed; version 3 is not getting a fix.

What to do

Ask your developer to update to go-jose v4.1.6. Apps still on v3 should plan a move to v4.

For your engineers

GHSA-mgcc-cww5-fp2q (High): DoS parsing JWKs with RSA keys, v4 <= 4.1.5. v3 <= 3.0.5 has no patched version; related go-jose issues CVE-2026-116586 and CVE-2026-116585 also remain unfixed on v3.

GHSA-mgcc-cww5-fp2q

Good to know Severity: High

cert-manager and klauspost/compress — Kubernetes and compression fixes

What this means for you

cert-manager issues website certificates inside Kubernetes; a fix stops one team’s settings from borrowing another’s DNS credentials. A popular Go compression library also fixed a crash.

What to do

Ask your platform team to update cert-manager to 1.19.6 or 1.20.3, and refresh Go dependencies so klauspost/compress is 1.20.2 or later.

For your engineers

GHSA-8rvj-mm4h-c258 (CVSS 7.3): direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials (1.18.0+). GHSA-fpmh-frq8-7rj8: zstd panic on two-block frames. Separately, golang.org/x/net v0.62.0 fixes two HTML parser issues (GO-2026-6860, GO-2026-6866).

GHSA-8rvj-mm4h-c258 · GHSA-fpmh-frq8-7rj8 · GO-2026-6860

Java

Plan this week Severity: High

Keycloak — authorisation bypass and XSS (CVE-2026-9800, CVE-2026-9086)

What this means for you

If you use Keycloak for staff or customer sign-in, a fix closes a way to reach pages a user should not see and a way to inject script into pages.

What to do

Ask your IT provider to update Keycloak to 26.6.4 or later (policy enforcer 26.0.10).

For your engineers

GHSA-f5p5-6xmx-p252 (CVSS 8.1): authorization bypass via incorrect URI comparison. GHSA-v3f7-2p4r-mwfw (CVSS 7.3): XSS via case-insensitive redirect URI validation bypass.

GHSA-f5p5-6xmx-p252 · GHSA-v3f7-2p4r-mwfw

PHP

Good to know Severity: High

Symfony — two denial-of-service fixes (CVE-2026-109413, CVE-2026-108082)

What this means for you

Symfony-based PHP apps could be slowed down or stopped by a crafted file or request header.

What to do

Alongside the PHP runtime update above, ask your developer to run composer update so Symfony is on 5.4.54, 6.4.46, 7.4.19 or 8.1.7 or later.

For your engineers

GHSA-2v3c-qxhr-7vpv: unbounded recursion in the YAML inline lexer. GHSA-r925-mgvr-h9cc: ReDoS in HeaderUtils::split() via the Cache-Control request header.

GHSA-2v3c-qxhr-7vpv · GHSA-r925-mgvr-h9cc

Rust

Plan this week Severity: Critical

Wasmtime on ARM servers — sandbox escape (CVE-2026-115893)

What this means for you

If you run other people’s WebAssembly code on ARM servers (such as AWS Graviton) with Wasmtime, a crafted module could escape its sandbox.

What to do

Ask your developer to update Wasmtime to 36.0.19, 48.0.7 or 49.0.4.

For your engineers

Cranelift on aarch64 miscompiles br_table with more than ~256k targets, allowing a jump to attacker-controlled offsets (CVSS 9.9). All aarch64-capable versions affected; x86-64 not affected per the advisory.

GHSA-mghf-wjfp-p5xm

Vercel & Next.js

Good to know Severity: Critical

Vercel has patched its platform for the Linux kernel flaw (CVE-2026-98432)

What this means for you

Projects hosted on Vercel are already protected; you do not need to redeploy.

What to do

No action for Vercel-hosted projects. If your Vercel site talks to servers you run yourself, update the kernel on those servers (see the top of this email).

For your engineers

Vercel updated hosts and guest kernels across builds, functions, sandboxes, CI and control plane. Its ALB-fronted paths block the IP options the attack needs; NLB-forwarded hosts were patched and rotated. Bulletin last updated 1 Nov 2026.

Vercel bulletin

Good to know Severity: Medium

Name.com domain takeover campaign — Vercel domains restored

What this means for you

Name.com, one of Vercel’s domain partners, is investigating domain hijacks aimed at crypto firms. Ten affected Vercel domains have been restored and their owners contacted.

What to do

No action needed. As good practice, make sure registrar accounts for your domains use two-factor sign-in and a registrar lock.

For your engineers

Vercel states no customer action is required; Name.com will publish updates. Treat as a reminder to review registrar MFA, transfer locks and DNSSEC.

Vercel notice

Next.js: no new Next.js security advisories were published this week. The most recent release is the 14 October update — if you have not applied it yet, upgrade to next@16.4.1 (or 15.5.28 on 15.x).

By cloud

AWS

Plan this week Severity: Critical

AWS — kernel update guidance for EC2, EKS, ECS and RDS (CVE-2026-98432)

What this means for you

Servers and container hosts you manage on AWS need the new kernel and a reboot. Services such as Lambda, CloudFront and API Gateway are handled by AWS.

What to do

Ask your cloud engineer to update and reboot self-managed EC2 instances, move EKS nodes to AMI v20261031 or later, refresh ECS container instances, and check RDS/Aurora database ports are not open to the internet.

For your engineers

Bulletin 2026-160-AWS (updated 1 Nov). Amazon Linux 2: sudo yum update kernel && sudo reboot; AL2023: sudo dnf update kernel --releasever=latest && sudo reboot (locked releases need 2023.12.20261102+). Fargate tasks launched after 1 Nov 17:00 GMT use a patched platform. RDS/Aurora OS patch due 3 Nov; Redshift 2 Nov; Bottlerocket AMIs from 2 Nov. Interim: Network Firewall rule dropping IPv4 packets with options.

AWS bulletin 2026-160

Plan this week Severity: High

AWS Private CA Connector for Kubernetes — certificate issuer check (CVE-2026-119115)

What this means for you

In Kubernetes clusters using AWS Private CA, a user limited to one team’s certificate issuer could get certificates from a more powerful shared issuer.

What to do

Ask your platform team to upgrade to v1.10.1 — and to check certificate settings first, as some may stop renewing after the upgrade.

For your engineers

Before upgrading, set issuerRef.kind explicitly (AWSPCAIssuer or AWSPCAClusterIssuer) on CertificateRequest, Certificate and Ingress resources; v1.10.1 rejects lenient matches. Workaround: scope approval policies and RBAC to issuer name and kind. AWS also published bulletins for the Kinesis Producer Library for Java (CVE-2026-119117), FreeRTOS-Kernel (CVE-2026-119086) and the Nitro Enclaves SDK for C.

AWS bulletin 2026-156 · AWS security bulletins

Google Cloud (GCP)

Good to know Severity: Medium

Google Cloud — eMudhra certificate update and two already-fixed issues

What this means for you

Google is removing trust in a compromised certificate authority (eMudhra / emSign) across its products. Two other bulletins this week were fixed by Google months ago and need nothing from you.

What to do

If you run GKE, ask your cloud engineer to upgrade node pools to the patched versions in GCP-2026-071 and rebuild your own container images so they carry updated certificate lists.

For your engineers

GCP-2026-071 (updated 27 Oct): COS node versions 1.37.1-gke.3011000, 1.36.5-gke.1817000, 1.35.9-gke.1390000, 1.34.12-gke.1508000, 1.33.13-gke.2152000, 1.32.13-gke.2883000, 1.31.14-gke.3093000; Ubuntu 1.35.9-gke.1390000, 1.34.12-gke.1508000, 1.32.13-gke.2883000, 1.31.14-gke.3093000 (1.33/1.36/1.37 still in qualification). Application containers do not inherit the node’s root store and must be rebuilt. Webhooks called by kube-apiserver without an explicit caBundle rely on the system store. GCP-2026-073 (Compute Engine disk exfiltration, High, fixed 31 Aug) and GCP-2026-074 (Application Integration, Critical, fixed 11 Sep): no action.

GKE security bulletins · Google Cloud security bulletins

Microsoft Azure

Plan this week Severity: Critical

Azure Linux and AKS — kernel fix for CVE-2026-98432

What this means for you

Azure Linux has a fixed kernel. AKS clusters on Ubuntu nodes are waiting for Canonical’s fix to reach new node images.

What to do

Ask your cloud engineer to upgrade AKS node images as new ones are released, and to update any self-managed Azure Linux VMs and reboot.

For your engineers

Microsoft record AZL-108246 lists kernel 6.6.157.1-1 as the last affected Azure Linux 3 package. For Ubuntu 24.04 linux-azure, Ubuntu lists the fix as pending. Use node image auto-upgrade or az aks nodepool upgrade --node-image-only once available; interim mitigations as in the AWS bulletin.

OSV AZL-108246 · Ubuntu status · AKS tracking issue

Cloudflare

Good to know Severity: Critical

Cloudflare — php2shell protections extended

What this means for you

Cloudflare’s firewall, including the free plan, blocks known php2shell attacks and has extended its rules this week. It helps, but it is not a substitute for updating PHP.

What to do

No settings to change. Still update PHP as described at the top of this email.

For your engineers

Managed rule “PHP Remote Code Execution Attack (CVE-2026-109618, CVE-2026-109619) #6” also covers CVE-2026-115560 when the default session.upload_progress.name is used. Submissions to Cloudflare’s PHP capture-the-flag challenge (27 Oct, updated 30 Oct) led to hardened rules and new detections. Pro, Business and Enterprise plans should confirm the Managed Ruleset is in block mode.

Cloudflare blog · Cloudflare PHP CTF update

By AI platform

Anthropic

Plan this week Severity: High

Claude Code — file write outside the project folder (CVE-2026-88968)

What this means for you

On Macs, a malicious code repository opened in Claude Code could overwrite files outside the project. Auto-update has already fixed most installs.

What to do

Ask developers who use Claude Code to confirm they are on version 2.1.251 or later (claude --version).

For your engineers

Edit-tool path validation was not bound to directory inodes; a process in the Bash sandbox could swap a parent directory for a symlink after validation (macOS). Requires attacker-controlled code in the sandbox, e.g. a malicious repo or dependency script. Separately, Anthropic’s 27 Oct research report describes the Linux kernel exploit behind CVE-2026-98432.

GHSA-5xjx-9qx6-jcrv · Anthropic research

Model serving and AI frameworks

Plan this week Severity: Critical

vLLM, LiteLLM and Agno — updates for self-hosted AI tools

What this means for you

If your team hosts its own AI models or an AI gateway, these updates close ways for a user or request to run code on the server.

What to do

Ask your developer to update to vLLM 0.32.0, the patched LiteLLM release for your line (for example 1.100.4 or 1.103.1), and Agno 2.3.24.

For your engineers

vLLM: request-controlled code_revision RCE with --trust-remote-code (fixed 0.31.0), SHM handle forgery to pickle.loads() and EPS/Ghostscript RCE (fixed 0.32.0). LiteLLM GHSA-7hp6-4w63-5g45: internal_user to proxy_admin via salt-key reuse (1.91.0+; interim EXPERIMENTAL_UI_LOGIN=false). Agno GHSA-m4w4-3r8h-jw98: eval() on FunctionCall field_type (Critical).

GHSA-h3rc-6mm3-gc2m · GHSA-6757-hggm-hp2w · GHSA-7hp6-4w63-5g45 · GHSA-m4w4-3r8h-jw98

Model Context Protocol

Good to know Severity: High

MCP TypeScript SDK — limits on request size

What this means for you

Tools that connect AI apps and agents to your data (MCP servers) built with the official TypeScript SDK could be overloaded by large requests.

What to do

If your team builds MCP servers, ask them to update @modelcontextprotocol/sdk to 1.32.0 or later, which also includes other recent fixes.

For your engineers

HTTP server transports did not cap body size or JSON-RPC batch length (fixed sdk 1.30.1, server/node 2.1.0, hono 2.0.1). 1.32.0 also covers GHSA-46jr-4wx8-v453, GHSA-rvq5-wwqv-78pq and GHSA-22jm-h49p-29qw.

GHSA-f897-62hf-6gxq · SDK advisories

OpenAI, Google Gemini and xAI: no new security advisories for their developer tools or SDKs this week.

Fixes that landed this week

Earlier open items that now have a vendor fix you can schedule.

Plan this week Severity: Critical

Linux kernel CVE-2026-98432 — fixed kernels now shipping

First published on 15 October, CVE-2026-98432 now has fixed kernels for Amazon Linux 2 and 2023, updated EKS and ECS AMIs (v20261031), and patched AWS Fargate tasks. Schedule an update and reboot for servers you manage.

AWS bulletin 2026-160

Good to know Severity: High

Brotli fix in PHP Windows builds

On 26 October PHP published Windows builds 8.5.12-1, 8.4.27-1, 8.3.36-1 and 8.2.35-1 with Brotli 1.2.1, closing the Brotli flaw for PHP on Windows. If you run PHP on Windows servers, install the “-1” builds.

php.net

None of the issues we were tracking as “no fix yet” received a vendor fix this week.

Still waiting on a vendor fix

Tracked issues with no fix yet. We will mention them again when updates ship.

Plan this week Severity: Critical

Ubuntu kernels for CVE-2026-98432

Canonical lists the fix as pending for Ubuntu 22.04, 24.04 and 26.04. Until it ships: set net.mptcp.enabled=0 where Multipath TCP is not needed, and drop IPv4 packets with IP options at the firewall. Install the kernel and reboot once released.

Ubuntu status

Good to know Severity: Medium

PHP session upload progress issue (CVE-2026-115560)

Affects fully patched PHP only in an unusual setup (the session serialize handler changed at runtime with session upload progress enabled). PHP will fix it in the next regular release. Meanwhile, avoid switching session.serialize_handler at runtime; Cloudflare WAF rules cover the default field name.

php.net · Cloudflare blog

Plan this week Severity: High

go-jose v3 — no fix planned

Version 3 has no patched release for the RSA key parsing issue. Plan a move to go-jose v4.1.6; until then, only accept keys from trusted sources.

GHSA-mgcc-cww5-fp2q

Plan this week Severity: High

Vue I18n 9 and 10 — cross-site scripting

Fixed in 11.4.14, but versions 9.14.5 and 10.0.8 have no patch. Plan an upgrade to v11 and avoid putting user-supplied HTML into translation messages.

GHSA-83rm-6c8r-g728

Good to know Severity: Medium

Echo v4 forwarded-IP headers

Spoofed X-Forwarded-For / X-Real-IP headers still have no v4 fix. Configure an explicit trusted-proxy IP extractor, or move to echo v5.4.1.

Echo advisories

Good to know Severity: Medium

a2a-go denial of service

No fixed version announced yet for releases up to 2.4.0. Limit untrusted input to A2A endpoints and watch upstream for a release.

GitHub advisories

Quick glossary

Denial of service (DoS) — making a service slow or unavailable, usually by overloading it.
Remote code execution (RCE) — a way an attacker could run their own software on a system if it is left unpatched.
CVE — a public ID for a known software vulnerability (for example CVE-2026-111497).
CVSS — a 0–10 score vendors use to describe how serious a vulnerability can be; useful for prioritising, not a panic button.

Know someone who’d find this useful? Forward this email, or share the sign-up link.

From Amzu

Need a second pair of eyes?

Amzu Information Technology Ltd can help you review what matters for your stack, plan updates, and harden GCP, AWS and Azure — without the drama.

Talk to our security team →

Prepared by Amzu Information Technology Ltd for subscribed customers.
Every item links to its original vendor or advisory source.
Questions: cybersecurity@amzuit.com

Disclaimer: The Amzu Security Briefing is provided by Amzu Information Technology Ltd for general information only. It is not professional, legal or security advice, and is not a recommendation to take or avoid any particular action. Content is compiled from public sources (vendor advisories, NVD, CISA and others) which are linked for each item; while we take care to report accurately, we make no warranty as to its completeness, accuracy or timeliness, and advisories may change after publication. Always verify details against the original source and test any update or change before applying it to your systems. Any decisions and their outcomes are your own responsibility, and to the fullest extent permitted by law Amzu Information Technology Ltd accepts no liability for any loss or damage arising from use of or reliance on this information.

We use standard email tracking to see whether this email was opened and which links were clicked. We use this only to improve the briefing, and it is never sold or shared. Unsubscribe anytime using the link below.

Manage or change your edition: amzuit.com/cybersecurity-newsletter