PHP's CVSS 9.2 fixes: Memory exhaustion and stale request state | Hacker News Reader