Open-Source PHP Team Also Admits to Decision Paralysis After 1 Flaw Found in 2024. The PHP Foundation said its coordinated vulnerability disclosure process for PHP2Shell worked, until it didn’t. A demonstration video of a binary update spilled early. Cybersecurity experts have since discovered exploit attempts that predate even those leaks.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/how-phps-coordinated-disclosure-process-went-belly-up-a-33176
