2026-09-25 21:02 UTC
GitHub's CVE issuing is really not good. I have two pending patches to release, and GH has taken a month so far. Researchers are now threatening to release zero-days as a result.
Replies (1)
-
@edorian@phpc.social 2026-09-25 21:56
@Synchro@phpc.social Hey Marcus. I'm Volker from the Ecosystem Security team at the PHP foundation ( https://thephp.foundation/blog/2026/05/18/announcing-ecosystem-security-team/ ) Is there something I can help with? The current delays for CVEs sadly are 5-10 weeks. If there's something I can do to help, feel to email, discord or DM me here. Depending on the specifics and what you want to achieve there are ways to get this done, or for me to reach out for help. Also available if you want to just talk things through.