This was a stressful day for PHP. But after reading the blog post https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
I feel that PHP really have a super professional team, trying to do the best, and a few outside companies blow it up. Is that right? or I'm missing something

thephp.foundationToday's PHP Security Release, and How We're Strengthening PHP SecurityDescribing the story behind how critical security vulnerabilities were found and fixed.
commit e4747ad