I spent most of this week reading security advisories so you don't have to. It was not a quiet week. Node.js, PHP and Python's favourite image library all shipped fixes for bugs where untrusted input could end up running code on your server. CISA added two more actively exploited flaws to its must-patch list. And somewhere in the middle of all that, a volunteer in Czechia quietly kept a large chunk of the internet running. If you run a backend in any of these languages, here's the short ve...