/php-oom-longjmp-memory-limit-rce-cve-2026-109618/ PHP's memory_limit Was the Attack Surface: Two Critical RCEs Hide in the Out-of-Memory Path Oct 22
/rust-borrowck-static-bound-bypass-inferred-local-wf/ Rust's T: 'static Bound Is Not Checked on Inferred Locals, and Drop Is Only the Messenger Oct 14