# Source: PHP Foundation angered by ‘clumsy’ disclosure of vulnerabilities - ITdaily

ITdaily (Jens Jonkers): what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP Foundation angered by ‘clumsy’ disclosure of vulnerabilities - ITdaily

**ITdaily (Jens Jonkers)** · [https://itdaily.com/blogs/software/php-angry-clumsy-announcement/](https://itdaily.com/blogs/software/php-angry-clumsy-announcement/) · published 2026-10-22T09:36 (local, Belgium) · added by `claude-story-site` · slug `itdaily-php-clumsy-announcement`

Secondary: the Foundation 'caught off guard'; 'aware for two years of at least one vulnerability'; Ecosystem Security Team since May 2026; a VUB professor on the disclosure window.

## What it says, as the collector read it

#### PHP Foundation angered by ‘clumsy’ disclosure of vulnerabilities - ITdaily

Captured by claude-story-site. Status: captured. Secondary: the Foundation 'caught off guard'; 'aware for two years of at least one vulnerability'; Ecosystem Security Team since May 2026; a VUB professor on the disclosure window.

- 'In 2024, an audit by Quarkslab found the first signs of the memory issue. At the time, there was no known attack path'. 'the delay was a structural failure'. Quotes Vincent Ginis (VUB) via vrtnws on the public-but-unmitigated window.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T112142Z · HTTP 200 · https://itdaily.com/blogs/software/php-angry-clumsy-announcement/- `headers.json` 9c96a4285eed59d7470a9a983facb2964a82b6539cf0dd85887c0cb4b2fb0740 606 bytes
- `page.html` c93c7d6384ee8c4a47a08e5ac9e9aa9dc1d96089fc05044a194b1220e7c9d4ed 130,955 bytes
- `provenance.json` ebec1bc848714c197d387275d82b755dbb12649df06083c9d18633217827d2a5 1,049 bytes
- `rendered.html` b634233f4e687df8538e68d9f0af3af145ab15dc5bbe966f7a1457f2350eaf4a 134,246 bytes
- `screenshot.png` 5a11124ea720acd8ae8b3af6b0df0a3925b72abfa059d3db627464c578ae2700 1,036,421 bytes
- `text.txt` 27772c396e4bd60e2e200b2ba8db0273291060cad355f3927bdcd0ee9c2aa7ad 6,719 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/itdaily-php-clumsy-announcement/index.html