<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>today | OKHK 👀</title><description>(⁠◔⁠‿⁠◔⁠) Are you OK？✨ Thinking...</description><link>http://tg.okhk.net</link><item><title>🔴 今日漏洞总结</title><link>http://tg.okhk.net/posts/11784</link><guid isPermaLink="true">http://tg.okhk.net/posts/11784</guid><pubDate>Wed, 21 Oct 2026 15:37:46 GMT</pubDate><content:encoded>&lt;div class=&quot;tgme_widget_message_forwarded_from accent_color&quot;&gt;Forwarded from &lt;a class=&quot;tgme_widget_message_forwarded_from_name&quot; href=&quot;https://t.me/outvivid/4943&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot;&gt;&lt;span&gt;层叠 - The Cascading&lt;/span&gt;&lt;/a&gt;&lt;/div&gt;&lt;i class=&quot;emoji&quot;&gt;&lt;b&gt;&lt;span class=&quot;post-title-source&quot;&gt;🔴&lt;/span&gt;&lt;/b&gt;&lt;/i&gt;&lt;span class=&quot;post-title-source&quot;&gt; 今日漏洞总结。&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;php [1]：RCE。请更新至 8.5.12/8.4.27/8.3.36/8.2.35。&lt;br /&gt;Node.js [2]：RCE。请更新至 26.12.1/24.22.1/22.23.4。&lt;br /&gt;eMudhra 证书 [3]：或可导致 MitM。请注意停用受影响证书、检查浏览器更新及更新 ca-certificates 等相关组件。测试方法和修复版本参见 [3]。&lt;br /&gt;TiDB 云被骇 [4]：有用户元信息被泄露；但目前没有数据库数据泄露的证据。&lt;br /&gt;&lt;br /&gt;1. &lt;a href=&quot;https://php.net/archive/2026.php#2026-10-21-5&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot; title=&quot;php.net/~&quot;&gt;php.net/~&lt;/a&gt;&lt;br /&gt;2. &lt;a href=&quot;https://nodejs.org/en/blog/vulnerability/october-2026-security-releases&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot; title=&quot;nodejs.org/~&quot;&gt;nodejs.org/~&lt;/a&gt;&lt;br /&gt;3. &lt;a href=&quot;https://emudhra.we-have-a-problem.com/&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot; title=&quot;https://emudhra.we-have-a-problem.com/&quot;&gt;https://emudhra.we-have-a-problem.com/&lt;/a&gt;&lt;br /&gt;4. &lt;a href=&quot;https://pingcap.com/trust-hub/security/security-update-october-2026/&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot; title=&quot;pingcap.com/~&quot;&gt;pingcap.com/~&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;&lt;a href=&quot;/search/result?q=%23wtf&quot; title=&quot;#wtf&quot;&gt;#wtf&lt;/a&gt; &lt;a href=&quot;/search/result?q=%23today&quot; title=&quot;#today&quot;&gt;#today&lt;/a&gt; &lt;a href=&quot;/search/result?q=%23PHP&quot; title=&quot;#PHP&quot;&gt;#PHP&lt;/a&gt; &lt;a href=&quot;/search/result?q=%23Nodejs&quot; title=&quot;#Nodejs&quot;&gt;#Nodejs&lt;/a&gt; &lt;a href=&quot;/search/result?q=%23PKI&quot; title=&quot;#PKI&quot;&gt;#PKI&lt;/a&gt; &lt;a href=&quot;/search/result?q=%23PingCAP&quot; title=&quot;#PingCAP&quot;&gt;#PingCAP&lt;/a&gt;&lt;a class=&quot;tgme_widget_message_link_preview&quot; href=&quot;https://php.net/archive/2026.php&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot; title=&quot;PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.&quot;&gt;
  
  &lt;div class=&quot;link_preview_site_name accent_color&quot;&gt;www.php.net&lt;/div&gt;
  &lt;img class=&quot;link_preview_image&quot; alt=&quot;PHP: News Archive - 2026&quot; src=&quot;/static/https://cdn4.telesco.pe/file/vIgG1_bhNTuynErPmNL0_c9HYjnCHSFWNQ1ygkL4Xi3ovg_EM4nM2nRUAhsUbHbB52BevmIoCQu5PvixMuzn1R04UHcQyL3kQko26kaxPYQU8A-945OBtQaLt2EhubURkoG6Czv59rF07VZ47yUIqhtHFYtvWItbzVdMiPrcuOzs-3tXKFVIUHBw5QR-EbOcc4S_1z4EdETwxic5rj6Gg1Xk6vcIQfRT9-m3xYIEn0MLqMAjpZXbAUqOFZDZa2Vn_e_7vn61Q-f7031ribdyoUfGKYEc0rXE5w5g8hlAA1XuWDN7S9Zq_sgkFXTBdbQuCAwF8VTAEBoSh1tX1BawSQ.jpg&quot; width=&quot;1200&quot; height=&quot;630&quot; loading=&quot;eager&quot; /&gt;
  &lt;div class=&quot;link_preview_title&quot;&gt;PHP: News Archive - 2026&lt;/div&gt;
  &lt;div class=&quot;link_preview_description&quot;&gt;PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.&lt;/div&gt;
&lt;/a&gt;</content:encoded></item></channel></rss>