🎯 Coordinated disclosure

The items that name it 9

• Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
  articleas classification.key entities2026-10-29
• Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
  writeupas classification.key entities2026-10-26
• PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now
  advisoryas techniques2026-10-22It is written here as Coordinated disclosure: advance notice on October 20, 2026, patches pre-shared with Linux distributions, release October 21, 2026.
• PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
  articleas classification.key entities2026-10-21
• Today's PHP security release, and how we're strengthening security
  articleas classification.key entities2026-10-21
• There's only so much code: the rise in vulnerability numbers
  articleas classification.key entities2026-10-20
• When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams
  articleas techniques2026-06-14

  Norm of reporting a serious flaw privately to the party that can fix it, agreeing on a timeline, and publishing once remediation exists

• How An Authorization Flaw Reveals A Common Security Blind Spot: CVE-2025-59305 Case Study | depthfirst
  writeupas techniques2025-09-30

  depthfirst privately reported to Langfuse on September 9, 2025; patch deployed the same day; CVE publicly disclosed September 15, 2025

• VulnCheck - Outpace Adversaries
  otheras techniques

  VulnCheck's vulnerability disclosure policy, last revised March 6, 2026: it contacts the affected vendor with details and sets a 120 day deadline to fix the issue or publish an advisory. It publishes a third-party advisory on the day the vendor publishes a patch or advisory, or an uncoordinated thir