Mmastodon TechnologySoftware first seen 1 d ago, last 1 d ago, peak #4
PHP Foundation admits critical flaws known for years
Original: Kritische PHP-Schwachstellen waren seit Jahren bekannt In einem ungewöhnlich offenen Statement räumt die PHP Foundation
The PHP Foundation has published an unusually candid statement acknowledging that the vulnerabilities behind the so-called 'PHP2Shell' issue were already known following an audit in 2024, yet remained unaddressed for years. The admission is drawing attention across the open-source community, with discussion focusing on how severe security flaws in a widely used language could go unfixed for so long and what it means for accountability in volunteer-driven projects.
Why now: The PHP Foundation's open admission that known critical vulnerabilities went unfixed for years is prompting debate about security management in major open-source projects.
Evidence
- Kritische PHP-Schwachstellen waren seit Jahren bekannt In einem ungewöhnlich offenen Statement räumt die PHP Foundation auf ihrer Webseite ein, dass die Schwachstellen hinter “PHP2Shell” bereits seit einem Audit im Jahr 2024 bekannt… https://www. linux-magazin.de/news/kritisch… · redaktion@social.linux-magazin.de · 3
API: https://socialmediatrends-api.osmike.com/v1/trends/3261308