PHP Foundation says Chainguard broke security embargo ahead of emergency RCE patches
jedisct1 · x · 2026-10-22
- The PHP Foundation accuses Chainguard of violating a coordinated security embargo by disclosing details ahead of critical RCE patches, disrupting the synchronized release.
- Reported by Socket, the incident highlights a breakdown in vulnerability disclosure coordination between vendors in the open source supply chain.
More from Safety
- Postiz shuts down citing suspected Railway compromise after Anthropic and Stripe key-leak alerts — seanwbren · 2026-10-22
- OpenAI researcher: domestic compute-pact compliance is doable, international verification is the hard part — ohlennart · 2026-10-22
- Railway breached with API keys drained in real time, users urged to rotate all keys immediately — menhguin · 2026-10-22
- Critical PHP zero-day (CVSS 9.2) disclosure sparks AI-powered patch-race warnings and local-agent quips — AIFlow_ML · 2026-10-22
- Researchers credit OpenAI's Daybreak program with GPT-5.6 access for Chrome, GitLab exploits — Eric_Wallace_ · 2026-10-22
- Beff Jezos: labs will generate cyber threats and sell the insurance themselves — beffjezos · 2026-10-22