PHP Admits Security Process Failed After Two Critical RCE Flaws
PHP Foundation’s response to two critical RCE vulnerabilities exposes a deeper problem of failed security process: limited security capacity, stalled fixes, unclear ownership, and an unsustainable maintenance model.