PHP Foundation warns critical web infrastructure is underfunded

Executive Director Elizabeth Barron described the foundation as severely underfunded after two serious PHP flaws triggered a global patching effort. The foundation said it had no evidence of exploitation before disclosure or on patched systems.

AI helped researchers find the decade-old bugs, but it is also increasing the maintenance load. Proposed code changes have nearly doubled from a year ago while contributor numbers have not, leaving experienced humans to review a much larger flow of patches and reports.