PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Embracing CarbonImmutable in PHP: A Shift Towards Reliable Date and Time Management

hackerone.com | blog | #php | #best-practices | #carbon-immutable | #datetime | #immutability
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Makes the case for CarbonImmutable over PHP's mutable Carbon library, showing how immutable date-time objects prevent subtle bugs and improve reliability.
Published
Collected

Related coverage

blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · xbow.com
PHP2shell: Patch Today, Then Prove It
The PHP Project just shipped fixes for the vulnerability dubbed PHP2shell. Step one is to patch, confirm it took, and make a plan for anything too old to patch.
blog · xbow.com
Don't Make It Easy for Attackers: 5 Common AppSec Gaps
Discover five common AppSec gaps that give attackers an advantage and learn how better testing, validation, and remediation can reduce exploitable risk.
blog · about.gitlab.com
PHP2Shell: GitLab helps find and remediate critical PHP flaws
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution. Learn which PHP versions fix them and how to check your projects.
blog · aikido.dev
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
If you run PHP anywhere in your stack and did not upgrade, stop reading this and go upgrade to a patched version. More information on this is on our advisory blog, and check out php2shell.aikido.io to see if your service is potentially vulnerable.
Back