PHP knew about one of the flaws in 2024 but could not agree a fix

In a blog post, the PHP Foundation provided an unusual account of recent emergency security patches. The organization revealed that one of the two critical vulnerabilities had been identified two years ago in 2024, but the community spent several months unable to reach consensus on how to address it before the fix was ultimately released.

Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Next Web did the reporting; read the original for the full story.