Had to laugh about this one a few times today already. Unfortunately don't know the author
Nils Adermann
7 commits
NA
Nils Adermann
@naderman
Co-Founder of 
@packagist / https://packagist.com and Co-Creator of 
@composer - he/him
- @packagist
- Berlin, Germany
- www.naderman.de
- github.com/naderman
- Sponsor on GitHub
- Joined October 2026
Commit activity
7 commits in the last 30 days
longest streak 3 days
973 / 1,000 XP27 XP to wheel
Fri, Oct 23
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 on Wednesday, keep it disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected.…
php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
Invaluable tip straight from @naderman—flipping
session.upload_progress.enabled=0 in php.ini is such an easy, zero-downtime mitigation while waiting on upstream distro packages.Tue, Oct 20
The PHP security team would like to give advance notice of an upcoming security release. It is scheduled for Wed, Oct 21st 2026 at 14:00 UTC. It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2. All PHP users are encouraged to prepare to update.
Earlier release…
Something tells me I'm not getting much sleep tonight. This drops at midnight for me.
I'll try and keep Securing Laravel updated with any details I'm aware of: https://securinglaravel.com/laravel-security-notice-critical-php-security-release/
Securing LaravelLaravel Security Notice: Critical PHP Security Release ⚠️[Notice #5] A Critical PHP Security Release is coming very soon - you need to be ready to patch your servers.
Fri, Oct 16
That's @naderman's root commit.