PHP: two critical vulnerabilities allow unauthenticated remote code execution
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that may allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
CERT24