The PHP fix for CVE-2026-109618 and CVE-2026-109619: +11556 lines of code | Hacker News Reader