hey people who work at Chainguard, what's up with https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ which says y'all unilaterally broke the embargo? Maybe you have another side of the story to share that gives nuance to that?
0 Boosts
0 Likes
@legoktm Thanks! I will read that
https://www.linkedin.com/feed/update/activity:7518674893593550849 has Chainguard's announcement including
"Coordinated disclosure is hard, we appreciated everyone's help as we worked through this over the last several days."
(also on their Twitter at
/chainguard_dev/status/2112910754672185842 )
@brainwane their claim is essentially that it was being exploited in the wild so it didn't make sense to maintain the embargo (if true, I think that's actually quite reasonable)
https://news.ycombinator.com/item?id=50176735
We've been working with the team on the coordinated disclosure, but I made the c... | Hacker News