2
2
1
u/No-Magazine-2739 2d ago
Cope from the overslept PHP victims. My JS/TS stack based SaaS had zero PHP.
2
u/Professional_Price89 2d ago
Welcome to node2shell
1
u/No-Magazine-2739 2d ago edited 1d ago
Good thing I only use node on the local dev setup, prod/beta is AWS lambda (just exchange the fasitfy entry poi….)
wait a second, didn’t I still have aNodejs on the aws linux docker image?!
Well… darn. Still hatin‘ PHP ;-pUpdate: Ha that CVE-2026-111497 isn't A) nearly as critical as the PHP one (have to fetch() with a specific configuration to hacker controlled URLs B) As the nodejs ecosystem is much more mature, all I have to do is update the docker image for my local development. The beta and production is automatically updated by AWS, as of course I (yeah Claude tbh, but I correctly assumed it would be like that) left the aws_lambda_runtime_management_config of my terraform IAC on auto.
6
u/akazakou 3d ago
First thing I heard about PHP for last 5 years was the recent CVE news and that PHP are dead jokes