There's a third PHP2Shell bug, but it won't get an emergency fix
Posted by PrivacyWire
A third PHP2Shell bug matters because software vulnerabilities can put systems and private data at risk. The lack of an emergency fix also raises questions about how quickly users can be protected when a security problem is found. Have you experienced delays in getting security fixes for software you rely on?