Comment by nicce
11 hours ago
I think some of the issues could have been avoided here, if they would not chase the PR and blog posts.
11 hours ago
I think some of the issues could have been avoided here, if they would not chase the PR and blog posts.
What's the "other way" that would be better in general?
The release should've been done sooner once it was clear the embargo was broken and people figured out the vulnerability.
Some issues covered here: https://thephp.foundation/blog/2026/10/21/todays-php-securit...
More proactive outreach and better coordination with key downstreams.