PHP Foundation Cites Structural Failure for Delay in Security Patch

The PHP Foundation has blamed a prolonged delay in addressing a critical security flaw on “structural failure,” citing indecision and limited resources. The admission comes as PHP released emergency patches for two related vulnerabilities after international observers warned that attackers could gain remote code execution without authentication. While the foundation acknowledged it identified early signs [...]