Two Critical PHP Flaws Trigger Global Cybersecurity Alert
On October 23, PHP advised users to temporarily disable the session upload progress feature until the next bugfix release due to two critical vulnerabilities. The warning followed an earlier advisory on October 21 about a related issue. The latest flaw affects applications only if specific session settings are changed while the upload progress feature is enabled. Users who have already disabled it need no further action.
Times of India·



