Upcoming critical PHP security release (CVE-2026-109618 / -109619)

	Upcoming critical PHP security release (CVE-2026-109618 / -109619)(news-web.php.net)
	1514 points by xd 5 days ago \| 650 comments
	tl;dr: Summary not available
	HN Discussion: ↑Panic and alarm that this is a catastrophic vulnerability already being exploited in the wild ↑Frustration demanding the patch be released immediately to limit damage ~Defense of the delayed release, arguing early release wouldn't help and maintainers need sleep •Practical mitigation advice: take servers offline or use Cloudflare WAF until patched •Related information sharing about Node.js also having security releases