Sal Kimmich

Overview In October 2026, two critical bugs in the PHP runtime leaked before their fix, were exploited before their release, and landed in KEV nine days after the first attack. The PHP project handled its part well. The vulnerability database ecosystem did not: it carried an accurate record to every Read more