PHP Foundation admits structural failures, delays in fixing critical security vulnerabilities.

BlockBeats news, October 22: The PHP Foundation stated that due to hesitant decision-making and insufficient resources, remediation work for critical security vulnerabilities first discovered in 2024 has repeatedly stalled and restarted, characterizing the delays as a "structural failure."

PHP is a programming language widely used for websites and web applications. PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the vulnerabilities to execute code on affected servers without needing to log in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.