https://stackwatch.de/en/blog Practical know-how for dev teams without a security team: current vulnerabilities, runtime end of life, prioritization and evidence for NIS2 and ISO 27001. en-US Sun, 25 Oct 2026 00:00:00 GMT https://stackwatch.de/en/blog/gitlab-cve-2026-97229 https://stackwatch.de/en/blog/gitlab-cve-2026-97229 Two critical RCE flaws in GitLab's regex compiler (CVSS 10.0): affected and fixed versions, why 19.4.2 is not enough, how to check your instance. Sun, 25 Oct 2026 00:00:00 GMT https://stackwatch.de/en/blog/http2shell-cve-2026-111497 https://stackwatch.de/en/blog/http2shell-cve-2026-111497 Critical bug in the Brotli decoder: affected and fixed versions for Node.js, Bun, Python, Envoy and libbrotli, how to check, interim measures. Sun, 25 Oct 2026 00:00:00 GMT https://stackwatch.de/en/blog/php2shell-cve-2026-109618 https://stackwatch.de/en/blog/php2shell-cve-2026-109618 Critical RCE in the PHP core: affected and fixed versions, how to check your systems, pitfalls with Docker and distros, interim measures. Sat, 24 Oct 2026 00:00:00 GMT https://stackwatch.de/en/blog/end-of-life-php-node-python https://stackwatch.de/en/blog/end-of-life-php-node-python Which PHP, Node.js and Python versions still get security updates. PHP 8.2 ends on 31 Dec 2026. With commands to check your repos. Sat, 24 Oct 2026 00:00:00 GMT https://stackwatch.de/en/blog/cvss-epss-kev-prioritization https://stackwatch.de/en/blog/cvss-epss-kev-prioritization Three scores, three questions: how bad, how likely, already exploited? How to prioritize vulnerabilities, using PHP2Shell as an example. Sat, 24 Oct 2026 00:00:00 GMT https://stackwatch.de/en/blog/vulnerability-management-nis2-iso-27001 https://stackwatch.de/en/blog/vulnerability-management-nis2-iso-27001 What NIS2 and ISO 27001 control A.8.8 require for vulnerabilities, translated into processes, deadlines and evidence for engineering teams. Sat, 24 Oct 2026 00:00:00 GMT