I find it curious. This is the first time I’ve heard much talk of PHP offline. I thought no one knew enough to ask “what about PHP 6?” (a question that’s close to my heart). I’m no cybersecurity expert (my proficiency is in outing fires), but there’s exponentially infinite “fun” source material either way if anyone’s interested in this sort of thing:

• https://osv.dev/list
• https://app.opencve.io/cve/
• https://vuldb.com/
• https://vulnerability.circl.lu/
• https://www.rapid7.com/db/
• https://www.openwall.com/lists/oss-security/