What's the "other way" that would be better in general?
replyThe release should've been done sooner once it was clear the embargo was broken and people figured out the vulnerability.
replySome issues covered here: https://thephp.foundation/blog/2026/10/21/todays-php-securit...
replyMore proactive outreach and better coordination with key downstreams.
reply