# FIRST TLP 2.0: the php2shell risks it governs

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Each FIRST TLP 2.0 clause or control the GRC desk cites, the php2shell risks mapped to it and who owns them.

[Frameworks](../index.html) / FIRST TLP 2.0

# FIRST TLP 2.0: the php2shell risks it governs

The labels for sharing under embargo: the mitigation advice given early to critical-infrastructure providers, and its possible leak, is a TLP question.

**Full name** FIRST Traffic Light Protocol 2.0 · **Publisher** FIRST · **Version** 2.0, August 2022 · [the official text](https://www.first.org/tlp/)

## Clauses and controls

| Control | What it asks (paraphrased) | Risks mapped | Owned or regulated by |
|---|---|---|---|
| **TLP:AMBER** | Limited disclosure: recipients share only within their organisation and its clients on a need-to-know basis | *no risk mapped* |  |
| **TLP:AMBER+STRICT** | Limited disclosure: recipients share only within their organisation | [R02 The coordinated disclosure broke before the fix was ready](../../../grc/risks/r02/index.html) **20** critical [R02-2 Early mitigation advice to a few providers leaked](../../../grc/risks/r02-2/index.html) **9** medium | [The PHP security team](../../../grc/stakeholders/php-security-team/index.html) |


---
site v0.8.1 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/grc/frameworks/tlp/index.html