The Cybersecurity Administration urged immediate updates to PHP, Node.js and Go after vulnerabilities and an incident involving disclosed private keys.