Two critical PHP flaws trigger global alert; millions of services face cyber risk
PHP issued a global alert on October 23 regarding two critical flaws affecting millions of services. Users are advised to temporarily disable the session upload progress feature until the next bugfix release. This vulnerability arises when specific session settings are altered while the feature is enabled, posing a cyber risk to applications.