(1/5) Some thoughts on yesterday's #PHP #vulnerability
🔒 Normally, vulnerabilities are patched before we hear about them, with key distributors notified in advance to reduce risk. This time, a security researcher accidentally published details early, and a for-profit PHP distributor broke embargo and leaked the fix. The vulnerability was exploited in the wild within the hour, making everything worse.
Jordan Maris 🇪🇺 🇺🇦 #NAFO
npub1fz…tp7r7
2026-10-22 12:59:23 UTC
Author Public Key
npub1fzhf7ptaparpd65m0xhzf5sl6t6yysk94p9vrg77qqnhfh4t073s7tp7r7Seen on
wss://relay.momostr.pinkPublished at
2026-10-22 12:59:23 UTCEvent JSON
{
"id": "ddc113bb2722e4726b3b588409684d7b2475802ba7c31d11ada67929d96b6ca4",
"pubkey": "48ae9f057d0f4616ea9b79ae24d21fd2f44242c5a84ac1a3de002774deab7fa3",
"created_at": 1792673963,
"kind": 1,
"tags": [
[
"t",
"php"
],
[
"proxy",
"https://eupolicy.social/@jmaris/117484680869664219",
"web"
],
[
"t",
"vulnerability"
],
[
"proxy",
"https://eupolicy.social/users/jmaris/statuses/117484680869664219",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://eupolicy.social/users/jmaris/statuses/117484680869664219",
"pink.momostr"
],
[
"-"
]
],
"content": "(1/5) Some thoughts on yesterday's #PHP #vulnerability \n\n🔒 Normally, vulnerabilities are patched before we hear about them, with key distributors notified in advance to reduce risk. This time, a security researcher accidentally published details early, and a for-profit PHP distributor broke embargo and leaked the fix. The vulnerability was exploited in the wild within the hour, making everything worse.",
"sig": "9a0dbcefdaa16c1e84aca128eddf180777f2bee7924a11f916c11fa4d44bbf63eca431f149b6e3d7d297314f2b92ec55b92bfbc26527d1cd508bfe7faab05a24"
}