PHP vulnerability post-mortem reveals bug was known two years ago — Small team of maintainers knew of the issue before it was made public, as new PHP2Shell chained exploit ravages servers

PHP has a harvest season to remember — AI-automated bug hunting reaps what years of technical debt have sown.