NodeJS and Java are in a similar place (this CVE is a memory safety issue in PHP's C-language interpreter) but Go's compiler/runtime is written in Go and is memory-safe all the way down to the assembly.
Much of Node’s standard library is written in JavaScript, which can’t go on to exploit V8 vulnerabilities even given similar types of bugs, so I wouldn’t say it’s in a similar place. Not as familiar with Java, but I expect PHP is in a class of its own here.
I expect it will be the death of the C codebase which will get an oxidation push.
This is a joke, right? I can't tell if this is a joke.
It probably is but I am converting everything to python already.
Not rust?
1 reply →
...and make no mistakes!
Given the proven capabilities of LLMs in computer security, get ready for similar issues to affect NodeJS, Java, Go, Rust etc...
NodeJS and Java are in a similar place (this CVE is a memory safety issue in PHP's C-language interpreter) but Go's compiler/runtime is written in Go and is memory-safe all the way down to the assembly.
Much of Node’s standard library is written in JavaScript, which can’t go on to exploit V8 vulnerabilities even given similar types of bugs, so I wouldn’t say it’s in a similar place. Not as familiar with Java, but I expect PHP is in a class of its own here.
Looks like we now have a similar release happening for NodeJS
https://nodejs.org/en/blog/vulnerability/october-2026-securi...
1 reply →
Don’t you mean WWZ ? Php is hardly dead – billions of installs.
I wish
“PHP is the cockroach of the internet”
[flagged]