PHP Maintainers Schedule Emergency Patches for Two Critical Vulnerabilities
The PHP project has announced the pending release of two security updates, each assigned a severity score of 9.2 out of 10.
Developers and server administrators are preparing for two emergency patches for PHP, the server-side scripting language underpinning a significant portion of the internet. The updates are scheduled for release within approximately 12 hours.
The maintenance team classified both vulnerabilities with a severity rating of 9.2 out of 10, indicating potential for significant risk to infrastructure if left unpatched. These updates address flaws that could allow unauthorized access or compromise of web applications running on the language.
Project maintainers issued an advisory urging administrators to prepare their systems for immediate deployment upon the release of the patches. The team noted that they reserve the right to expedite the release schedule if technical details about the vulnerabilities are disclosed or if active exploitation is observed in live environments.