via @dokuwiki via @sebsauvage
+ https://ma.ttias.be/php-cve-2026-109618-early-mitigation/#what-is-disputed-or-unverified
