/dev/null
Sign in

Commit

95bf35c

stemonte@monteduro
Will this week ever end? Quoting @ThePHPF: "Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc" https://x.com/ThePHPF/status/2113580383875019242
Attached image
X (formerly Twitter)The PHP Foundation (@ThePHPF) on XSet session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc

commit 95bf35c