PHP knew about one of the flaws in 2024 but could not agree a fix
The Next Web
Read the full article
The PHP Foundation revealed it discovered one of the critical PHP2Shell vulnerabilities in 2024 but delayed fixing it due to disagreements on repair methods. The flaws were publicly leaked in October 2026, accelerating the patch release and exploit spread.
- Today's PHP Security Release, and How We're Strengthening PHP Security· Simon Willison's Weblog
