Vulnerabilities
Why Are Agencies Urging Immediate Isolation of Unpatched PHP Sites?
Emergency patches fix two critical remote code execution flaws in PHP, prompting agencies to urge immediate isolation of unpatched internet-facing applications.
PHP
Everything Sandbox Dispatch has reported about PHP: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
How do pipe-free lines in commonmark tables cause quadratic CPU scans in PHP apps?
Unauthenticated inputs can trigger repeated buffer scans in the commonmark library, leading to high-severity denial of service attacks on PHP workers.