PHP Patches Two Critical Security Flaws Found With AI Tools

The notable shift here is methodological: the flaws were surfaced by AI tooling rather than conventional manual review, which suggests vulnerability discovery is scaling faster than many maintainers' patching cadence. Because PHP underpins a large share of the web, the practical exposure runs through downstream site operators and hosting providers who must actually apply the fixes, not just the language's core team. The open question is whether AI-assisted discovery becomes a routine edge for defenders or a broader accelerant for attackers probing unpatched installs.