Why did php announce such a easter egg hunt before they have patched the vulnerability. Isn't it expected behavior that someone will find it and provide a poc?
Commit
4114e14
Oh I'm a dumbass, was it a hackernews spoiler and not from the php team?
commit 4114e14