PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024

The PHP Foundation has released a statement regarding two critical vulnerabilities, one of which originated in 2024. A recent review by AI companies brought increased attention to both vulnerabilities, prompting the foundation to expedite the release of information about them. The foundation's statement provides details on the vulnerabilities and the events that led to the accelerated disclosure. The AI review played a key role in raising alarm about the vulnerabilities, although signs of one of them had surfaced as early as 2024. The foundation scrambled to post information about the vulnerabilities earlier than initially planned due to the heightened attention. The statement aims to provide clarity on the critical vulnerabilities and the circumstances surrounding their disclosure.