Why did php announce such a easter egg hunt before they have patched the vulnerability. Isn't it expected behavior that someone will find it and provide a poc?
commit a46f9f7
Commit
a46f9f7
Oh I'm a dumbass, was it a hackernews spoiler and not from the php team?