The security patch is expected to drop today at 10 AM ET, and PHP users are being urged to "upgrade as soon as the release is available" due to the high severity of the exploit.
UPDATE - OpenAI says it led a coalition in discovering and mitigating critical security flaws in PHP.
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
UDPATE - Google says its Gemini 4 Argon AI model helped discover and mitigate critical security flaws in PHP.
@disclosetv