Checked fact 252923 Oct 2026Safety and security
The advisory says: "The producer and consumer requests must reach the same worker. Multiple workers and recycling reduce success per request but do not remove the condition."
The exact words it rests on
The producer and consumer requests must reach the same worker. Multiple workers and recycling reduce success per request but do not remove the condition.
What the source said when we opened it, on 23 Oct 2026.
The source
GHSA-6wmf-4rv5-p3rp: RCE via stale global state (CVE-2026-109619)
Checked
Checked by the notis newsroom on , against the source above.
In the story
PHP patches two critical remote code execution flaws 23 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.