Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Party
Quarkslab, OSTIF
2024 audit that first surfaced the OOM issue
Claims this site attributes to this party
| Claim | Who says it | Status | Fact-check | Primary | Sources |
|---|---|---|---|---|---|
| Quarkslab's published audit summary lists 27 findings, two redacted because their fixes were complex and in progress; it does not describe an out-of-memory finding The Foundation says the OOM signs were found while fixing one of the audit's findings, not in the audit report itself. fact timeline → | Quarkslab's blog; a Substack analysis | reported | A6 Established●●●●●● | 1/2 | Quarkslab David Lopez-Kurtz |
Its sources in the vault
- Today's PHP Security Release, and How We're Strengthening PHP Security The PHP Foundation
- php2shell by Calif Research — A tale of two PHP remote vulnerabilities Calif (Calif Research)