PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024

In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned.