কগনিশন একটি এজেন্ট প্লাগইন ওপেন-সোর্স করেছে যা সাম্প্রতিক সাইবার নিরাপত্তা হুমকি থেকে সিস্টেম সুরক্ষিত রাখতে সাহায্য করে

এটি ফিডে পাওয়া অংশবিশেষ। এটি সংক্ষিপ্ত বা প্রকাশকের মূল ভাষায় হতে পারে।

Cognition has released the Devin Vulnerability Fixes plugin, a free, open-source set of agent skills. It targets three critical remote code execution (RCE) advisories. They cover PHP2Shell, the Node.js October 21, 2026 security release and a CVSS 10.0 self-managed GitLab bug. The skills run in Devin and in any coding agent that reads SKILL.md files. Cognition packaged the remediation workflow it used internally. Developers can do inventory, approve, patch, test, then ship 1 pull request per repository. TL;DR Size: Three skills (fix-php-vuln, fix-node-vuln, fix-gitlab-vuln), MIT license. Runs on: Devin, Claude Code, Codex, Cursor, Factory Droid, GitHub Copilot, Gemini CLI, OpenCode and Windsurf. Needs git, a shell, Docker and registry access. The npx skills install needs Node.js 22.20 or later. Performance: No remediation benchmark or fix-rate number is published for the plugin. Best: Covers the week’s most severe bug, GitLab CVE-2026-110264, rated CVSS 10.0. Worst: Validation is only as strong as your tests. Managed runtimes, appliances and Electron apps are flagged, not patched. What is the Devin Vulnerability Fixes plugin? The Devin Vulnerability Fixes plugin is a set of three Agent Skills from Cognition. They find and patch vulnerable PHP, Node.js and self-managed GitLab deployments. The source is on GitHub under the MIT license. Cognition’s product page lists it as free and open source. Which vulnerabilities does it fix? PHP2Shell (CVE-2026-109618, CVE-2026-109619): PHP rates both flaws CVSS v4.0 9.2. The first corrupts memory after an out-of-memory condition. The second lets stale global state from one request reach the next. PHP says every web-serving setup is at risk, with mod_php rated highest risk. Fixed versions are 8.2.35, 8.3.36, 8.4.27 and 8.5.12. PHP 8.1 and older get no releases, only source backports for 7.4, 8.0 and 8.1. Node.js October 2026 release: It fixes 10 CVEs, 4 rated High. The lead bug, CVE-2026-111497, is a Brotli decoder out-of