Still confused about how all this is being handled TBH. Why would you say "there is a huge vulnerability in PHP" before any patch or workaround (except for taking down the whole site) is available? Are you trying to make people take down their PHP sites?
@vaporeon_ yes, in order that said sites do not get attacked
@vaporeon_ @freya LLMs are getting scary good at discovering exploits without much in the way of guidance so weird disclosure behavior like this where details are not given at furst (even a little bit of guidance can apparently go a long way) but reason to take down your site is being given, is a kind of disclosure to actually even consider making