🚨 A major PHP security release is scheduled for today at 14:00 UTC and must be applied as soon as it’s out. It fixes two critical vulnerabilities, both rated 9.2 under CVSS v4.0. More details are on the PHP site https://www.php.net/archive/2026.php#2026-10-20-1 and in this Ars Technica article: https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/