PHP Security Disclosure Reportedly Disrupted as Emergency Patches Follow Early Warning

A reported early disclosure of two serious PHP vulnerabilities has raised concerns about coordinated security releases and the risk of exploitation before systems are patched.
A Hacker News user identified as petecooper reportedly mentioned the upcoming flaws on October 20 before their planned public announcement. PHP maintainers subsequently moved emergency updates forward to October 21.
Cloudflare reportedly observed millions of exploitation attempts shortly after disclosure, while some website operators temporarily disabled affected services as a precaution.
The scale of exploitation and service disruptions requires independent confirmation. Organizations running PHP should consult official security advisories, identify affected versions and apply supported security updates promptly.