Sean Coatessean
Oct 23, 2026, 4:46 PMThis is not shade toward the developers, but the #php2shell vulnerability was reported in August and the fix was published in October.
I have to think that increasing funding for a project as big as #PHP ( @thephpf ) could have reduced that timeline. In the era of analysis heavy machinery, it’s pretty unlikely that *only* the reporting party discovered this vulnerability. https://mastodon.social/@sovtechfund/117491065698939254