PHP ships emergency RCE fixes as GitLab and Ruby patch Onigmo
PHP's emergency releases for the two critical flaws arrive alongside Ruby fixes for four Onigmo regex CVEs. Censys counted 25,766 vulnerable GitLab hosts on October 13, but that's exposure, not confirmed victims — and SOC Prime reported no public proof-of-concept as of October 12.