Party
Quarkslab, OSTIF
2024 audit that first surfaced the OOM issue
Claims this site attributes to this party
| Claim | Who says it | Status | Primary | Sources |
|---|---|---|---|---|
| Quarkslab's published audit summary lists 27 findings, two redacted because their fixes were complex and in progress; it does not describe an out-of-memory finding The Foundation says the OOM signs were found while fixing one of the audit's findings, not in the audit report itself. | Quarkslab's blog; a Substack analysis | reported | 1/2 | Quarkslab David Lopez-Kurtz |
Its sources in the vault
- Today's PHP Security Release, and How We're Strengthening PHP Security The PHP Foundation
- php2shell by Calif Research — A tale of two PHP remote vulnerabilities Calif (Calif Research)