48小时内多家厂商曝高危漏洞，建议用 Codex 排查

Vaibhav (VB) Srivastav· @reach_vb · X·2026-10-23 06:21· 1 小时前AI 评分42

AI 导读

过去约48小时内集中披露多起安全漏洞：PHP 未认证远程代码执行、GitLab CVSS 10.0 远程代码执行、Node.js Brotli 解码器 RCE 及另外 9 个缺陷、Chrome 353 项安全修复、Oracle 1295 个安全补丁、Atlassian 176 条漏洞条目。

正文 · 原文

past ~48 hours in security:

PHP: unauthenticated remote code execution
GitLab: CVSS 10.0 remote code execution
Node.js: Brotli decoder RCE + 9 other flaws
Chrome: 353 security fixes
Signal: a bug that can prevent calls fully ending
eMudhra: compromised CA keys
Oracle: 1,295 security patches
Fortinet: critical/high fixes
Atlassian: 176 vulnerability entries

and that’s after the Linux VM escape disclosed last week.

ask Codex / your agent to check your code, dependencies and infrastructure for exposure to these.

set up automations to regularly check for newly disclosed vulnerabilities and flag what needs patching.

来源：Vaibhav (VB) Srivastav · x.com