nunomaduro: “php vulnerabilities: time to clarify what really happened h…”

nunomaduro @nunomaduro10h

php vulnerabilities: time to clarify what really happened here's my conversation with derick rethans, a member of php internals. we go through the full timeline and the facts watch here: https://youtu.be/5X5csEbmHqs?si=uAk74DG704DBWN0q

YouTube- YouTube

9:57 PM · Oct 23, 2026commit 5f006bc

Pauline Vos @paulinevosquoted10h

Nuno talks to one of my favs = immediate watch

Christen Dijoux @Akiyo9749h

Much needed, there was so much noise on X about this one (CVSS 10, actively exploited…). TL;DR for anyone skimming: update to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, there's no mitigation besides patching 🔐

Jorge Morales @morales2k9h

I agree, as others have stated; Much needed clarity on the recent events. 👏 Thank you for putting this out @nunomaduro 🐐

Commit