# Source: Security audit of PHP-SRC - Quarkslab's blog

Quarkslab: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · researcher · primary · captured

# Security audit of PHP-SRC - Quarkslab's blog

**Quarkslab** · [https://blog.quarkslab.com/security-audit-of-php-src.html](https://blog.quarkslab.com/security-audit-of-php-src.html) · published 2025-04-10 · added by `claude-story-site` · slug `quarkslab-blog-php-src-audit`

Quarkslab's own account of the 2024 php-src audit (OSTIF, Sovereign Tech Agency): findings, two redacted high-severity issues with fixes in progress.

## What it says, as the collector read it

#### Security audit of PHP-SRC - Quarkslab's blog

Captured by claude-story-site. Status: captured. Quarkslab's own account of the 2024 php-src audit (OSTIF, Sovereign Tech Agency): findings, two redacted high-severity issues with fixes in progress.

- Primary for the 2024 audit. Does not describe an out-of-memory finding as such.

## Claims that cite it

| Claim | Who says it | Status | Primary | Sources |
|---|---|---|---|---|
| Quarkslab's published audit summary lists 27 findings, two redacted because their fixes were complex and in progress; it does not describe an out-of-memory findingThe Foundation says the OOM signs were found while fixing one of the audit's findings, not in the audit report itself. | Quarkslab's blog; a Substack analysis | reported | 1/2 | [Quarkslab](../../sources/quarkslab-blog-php-src-audit/index.html) [David Lopez-Kurtz](../../sources/substack-lopezkurtz-patch-is-the-exploit/index.html) |

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T113008Z · HTTP 200 · https://blog.quarkslab.com/security-audit-of-php-src.html- `headers.json` 9a1974a3d0e74f6c61049df444eec6f88c921c1df160c4d36547d455f5f69d3a 721 bytes
- `page.html` cfffdbab1e24dbeaafa236432ed6653fa2442387aeae475f996cddddb722bb89 28,339 bytes
- `provenance.json` c1a3e69c282c4e578340fa0788f636f5604d1f0d0a6076bac4cd7bd024ee55ca 996 bytes
- `rendered.html` 032ff57da663f85dcf219749a2b1849c606efef96c9044684130409249a05e18 27,638 bytes
- `screenshot.png` 84a81db5a451d763ffe7a40817ea3c94e0e0a7d7da3bd0b7c74b2b8b0c912974 932,374 bytes
- `text.txt` cd5ccdaf99da0be1676b319643939d20c0a5d17df18eb8f0636eaad6ef7c9321 7,821 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/quarkslab-blog-php-src-audit/index.html