@gunchleoc
Perhaps, but even mature software can have simple bugs that go unnoticed. The slop alarms are strong with these RCEs but I can't figure out what motivation the PHP foundation would have for not being candid.