logoalt Hacker News

Maxious • today at 2:19 PM • 1 reply • view on HN

No, every platform affected.

> Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.

https://www.php.net/archive/2026.php#2026-10-21-5


Replies

CodesInChaos • today at 3:12 PM

I'm surprised by CGI. The vulnerability description talks about a second request being affected by corrupted state from an earlier request. But I thought CGI only processes one request per process?

➕ show 1 reply