How PHP's coordinated disclosure process went belly up: Leaks, an accidental release, a decision to push an updated binary early, shifting embargo dates/times for a massive coordinated vulnerability disclosure. Oh and the open-source PHP team also admits to decision paralysis after it found one of the flaws in 2024.
https://www.databreachtoday.com/how-phps-coordinated-disclosure-process-went-belly-up-a-33176
www.databreachtoday.comHow PHP's Coordinated Disclosure Process Went Belly UpThe PHP Foundation said its coordinated vulnerability disclosure process for PHP2Shell worked, until it didn't. A demonstration video of a binary update spilled