2026-10-23 16:46 UTC
This is not shade toward the developers, but the #php2shell vulnerability was reported in August and the fix was published in October.
I have to think that increasing funding for a project as big as #PHP ( @thephpf ) could have reduced that timeline. In the era of analysis heavy machinery, it’s pretty unlikely that *only* the reporting party discovered this vulnerability. https://mastodon.social/@sovtechfund/117491065698939254
Replies (2)
-
@heiglandreas@phpc.social 2026-10-23 16:50
@sean@scoat.es TBH: From how I read the report, funding could have solved this already 2 years ago /cc @thephpf@phpc.social
-
@mwop@phpc.social 2026-10-23 18:58
@sean@scoat.es @thephpf@phpc.social I'm not 100% convinced that more money/more people would have expedited this on (though it absolutely would have helped). You should look at the patches... They cover a LOT of the codebase.