PHP shipped emergency security updates on Wednesday. They fix two critical flaws that let an unauthenticated attacker run code on almost any server running the language. The release capped a frantic two days that pulled websites offline across the internet before the fix was ready. The patched releases are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. […]
This story continues at The Next Web