October 21 Security Roundup: PHP2Shell's Backstory, Java, HTTP/3, Node, Railway and OVH

21 October 2026 was a long day for security teams. PHP patched two critical vulnerabilities, Oracle...