This one claims to actually be an exploit. The other was an announcement from PHP without details.

How is this a better source, the current post is a PoC? This is just a warning...

You're not even reading the things you're saying are worse, and reccomending things that arent what you say they are (because you didnt read those either)