/gnu-savannah-email-local-part-shell-injection-bash-repo/ A Valid Email Address Ran Code on GNU Savannah. The Validator Was Right and the Shell Was the Bug Nov 5
/php-oom-longjmp-memory-limit-rce-cve-2026-109618/ PHP's memory_limit Was the Attack Surface: Two Critical RCEs Hide in the Out-of-Memory Path Oct 22