So here's the situation: it's not just PHP—Node.js has also urgently released a security update, with the official severity level marked as High. Node.js is the backbone of many websites' backends, used by PayPal, Netflix, LinkedIn, and more. This issue stems from its built-in decompression tool. When websites transfer data, they often use it for compression. Bad actors can intentionally create a malformed compressed file and send it to your server. Once the server decompresses it, errors occur. At best, it could leak passwords or keys; at worst, it could allow bad actors to run their own code on your server, essentially handing over control of the server to them. The good news is that only website programs or libraries that actively decompress incoming external data are vulnerable, so it hasn't caused the same level of panic as PHP.