Today's PHP Security Release, and How We're Strengthening PHP Security
Today's PHP Security Release, and How We're Strengthening PHP Security
Proof1 independent outlet
Key points
- If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP 8.x line) address two remote code execution holes, and there have been exploits circulating since last night, thanks to a leak in the coordinated disclosure process.
- This post from the PHP Foundation explain what went so wrong:
- As a result of the leak and pre-announcement around 20:00 UTC, Calif, one of the security firms that had reported the issues mistakenly published a video.
- August 19, 2026: Wiz Research discovers the first PHP vulnerability using Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol.
Sources (1)
- [1]Today's PHP Security Release, and How We're Strengthening PHP SecuritySimon Willison's Weblog · Oct 21, 06:41 PM
Today's PHP Security Release, and How We're Strengthening PHP Security
If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP 8.x line) address two remote code execution holes, and there have been exploits circulating since last night, thanks to a leak in the coordinated disclosure process.
Extractive summary: sentences quoted from the sources.
Before this
- Oct 21, 2026Granite Speech 5.0: Transcribe, Translate, and Attribute more Accurately and Faster
- Oct 21, 2026Mistral Advances AI for Engineering with NVIDIA
- Oct 21, 2026RubatoCodec: Budgeted Adaptive Speech Tokenization with Streaming Decoding
- Oct 20, 2026Access OpenAI GPT models on Amazon Bedrock from Canada with cross-Region inference
- Oct 20, 2026Do Diffusion LLMs Scale? Testing Mercury 3 + Decide
- Oct 20, 2026MPS in PyTorch 2.15
