PHP, Node.js and LiteLLM flaws spark fears of global security fallout
- —Node.js patched four high-severity flaws, two allowing TLS verification bypass
- —Malicious LiteLLM builds stole cloud keys, passwords and AI credentials
- —eMudhra private key theft enables issuance of fake certificates
- —Experts compare the fallout to the Heartbleed OpenSSL flaw
Why it matters: The flaws hit infrastructure used by crypto exchanges and wallets, raising the risk of breaches and key leaks.
Source: Digital Today