#PHP updates are here "PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately."

GitHub

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, ...

GitHub

RCE via stale global state

## Summary PHP contains various global state, such as error, session, object and extension state that is retained by a worker but points to memo...