PHP releasing patches today for two critical vulnerabilities

PHP developers will roll out security patches today for two critical vulnerabilities, The Verge reports. The flaws affect the widely used web programming language and could disrupt websites at scale if left unpatched, according to The Verge. With PHP underpinning many sites and apps, the timing raises urgent patching needs for hosts and developers.

In an advisory published Tuesday, the PHP project said the issues carry a critical severity rating and urged administrators to update as fixes become available. Patches are expected to propagate across operating system repositories and hosting platforms throughout the day, and security teams should monitor vendor channels for release notes, CVE identifiers once published, and any signs of exploitation in the wild. Watch for the official patch release and downstream package availability from major providers. [Developing. This article will be updated.]