Regarding the critical PHP vulnerability, only two projects were affected and have been shut down (I will update them tomorrow): #Fediplan and the MediaWiki.
All other projects, such as #HolosSocial, #HolosDiscover, #Fedihood and #Pawfed, were not affected.