PHP vulnerabilities

762 CVEs affecting PHP products, 5 known to be exploited (CISA KEV), with EPSS scores. Most affected: PHP, Archive Tar, PEAR, Frankenphp, Pearweb.