PHP Patch Day: Two Core RCEs and a Broken Embargo
Two CVSS 9.2 RCEs in PHP core, four patched versions, exploitation within hours of the leak — and an OpenAI employee credited in the advisory.
Web development articles
6 posts
Two CVSS 9.2 RCEs in PHP core, four patched versions, exploitation within hours of the leak — and an OpenAI employee credited in the advisory.
Earlier this week, the PHP ecosystem got a sharp reminder that supply chain attacks are not a theoretical concern.
Another day, another Javascript exploit.
Laravel Boost, the AI-assisted development tool for Laravel projects, has released v2.4.0 with several notable improvements focused on security, customization, and efficiency.
Laravel 13 drops today. If you're bracing for another upheaval like v12, you can exhale. This one's different.
The web is saturated with CMS options—WordPress alone powers 40% of the internet. Squarespace, Wix, Ghost, Contentful, Sanity... the list goes on. And yet, I built another one. Keep reading to find out why.