A vendor working with the U.S. Department of Homeland Security (DHS) has uncovered vulnerabilities impacting 11 major open-source software projects, including the Perl and PHP programming and scripting languages used widely to develop web applications.