> OpenAI and these security companies sat on this for 2 months

The PHP team knew about it since September 21st.