Today the PHP group has announced an additional advisory that only affects a very unlikely scenario depending on your application code.
It only affects applications changing the serialization handler via ini_set() during runtime before calling session_start().
HortusFox does not do this. Neither does the underlying Asatru PHP framework do this.
More info here:
https://www.php.net/index.php#2026-10-23-1
www.php.netPHPPHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.