· IndieSquare
Node.js
We updated Node.js in the main APIs, authentication services and developer console to a patched release and verified service startup and responses. Representative SDK usage examples have also been validated with patched Node.js.
PHP
For PHP, we reviewed the hosting provider’s announcement confirming completion of its patch rollout.
About the official announcements
The Node.js announcement covers security fixes including Brotli, TLS and DNS issues. The PHP advisory addresses two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. See the official announcements below for details.