Evidence · DiggingBeagle record
PHP Foundation: October 21 security release
- Source role
- vendor statement
Evidence record
Claim-level citations (2)
- supportsAI-assisted PHP research exposed request-cleanup paths to remote code execution: PHP released fixes for CVE-2026-109618 and CVE-2026-109619 on October 21 in versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12.
Today's PHP security release; vulnerability and fixed-version summary
- supportsAI-assisted PHP research exposed request-cleanup paths to remote code execution: PHP Foundation credits OpenAI with independently reporting the same OOM root cause and subsequently providing additional attack vectors.
Audit chronology, paragraphs on Calif, OpenAI and Wiz; inspected lines31-32