Underfunding cited as likely factor in recent PHP security incident
A recent security lapse affecting PHP has been linked to insufficient funding for the project's maintenance, according to reporting on the incident. The report notes that many services continue to run outdated PHP versions that no longer receive official support, compounding the risk.