NEWS

PHP and Node.js security updates

Following the PHP and Node.js vulnerability announcements on October 21, 2026, we assessed the impact on hazBase’s service infrastructure and related websites, and carried out updates and checks appropriate to each environment.

· IndieSquare

01

Node.js

We updated Node.js in the main APIs, authentication services and developer console to a patched release and verified service startup and responses. Representative SDK usage examples have also been validated with patched Node.js.

02

PHP

For PHP, we reviewed the hosting provider’s announcement confirming completion of its patch rollout.

03

About the official announcements

The Node.js announcement covers security fixes including Brotli, TLS and DNS issues. The PHP advisory addresses two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. See the official announcements below for details.

CONTACT

Discuss how your business could put its assets to work.

To start, tell us about your business goals, such as financing, launching a new business or asset management.
We can help identify the conditions to assess whether RWA fits your business.