⁵⁄₉ (@fiveoutofnine) on X

x.com/fiveoutofnine/status/2113045722744717360?s=20

So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.…