# Cognition releases open-source plugin for fixing security flaws

> The MIT-licensed Devin plugin includes three skills to inventory, patch and test affected PHP, Node.js and self-managed GitLab systems.

Oossa · 2026-10-25 · https://oossa.com/en/cognition-releases-open-source-plugin-for-fixing-security-flaws

Cognition released Devin Vulnerability Fixes, an open-source plugin with three agent skills for addressing recent critical remote-code-execution flaws. The skills inventory, patch and test affected PHP and Node.js systems and self-managed GitLab deployments, then open one pull request per repository. The supplied details do not identify the specific vulnerabilities or say when the plugin was released.

## The facts

- The plugin is licensed under MIT.
- It opens one pull request per repository after inventorying, patching and testing.

## Why it matters

Teams maintaining the affected PHP, Node.js or self-managed GitLab systems can use the plugin to prepare fixes as pull requests, but the available details do not establish which specific flaws it covers.

## Sources & references

1. [Cognition Open-Sources an Agent Plugin that Helps Secure Systems against Recent Cybersecurity Threats](https://www.marktechpost.com/2026/10/24/cognition-devin-vulnerability-fixes-plugin-php2shell-nodejs-gitlab/) – MarkTechPost, 2026-10-25

Last updated: 2026-10-25