Cognition released Devin Vulnerability Fixes, an open-source plugin with three agent skills for addressing recent critical remote-code-execution flaws. The skills inventory, patch and test affected PHP and Node.js systems and self-managed GitLab deployments, then open one pull request per repository. The supplied details do not identify the specific vulnerabilities or say when the plugin was released.
Why it matters
Teams maintaining the affected PHP, Node.js or self-managed GitLab systems can use the plugin to prepare fixes as pull requests, but the available details do not establish which specific flaws it covers.