Comment by EGreg
15 hours ago
It's not exactly a common situation. This is an emergency for many people. They are vulnerable and unprotected, and UNABLE TO PATCH their PHP... what do you recommend them to do?
This is MIT open source, run it through your own LLM. If you find a bug, submit a fix.
If you're paranoid, launch it as a Linux user with no access to any files. It's just supposed to proxy some network requests.
>what do you recommend them to do?
Shut down the affected services until they can install the patch. This issue is widespread enough that users will understand. Many government etc sites are affected too.
People unable to patch PHP probably aren't the same people who can be trusted to audit every piece of open source code they interact with. Even in the advent of AI.
I'm sure you have the best intentions. I still think anyone trying to fix a massive security hole by running random 10 minute old code from Github isn't really being smart about it.