On: Security advisory: Critical remote code execution vulnerabilities, update now

[1718627440]

I think the actual difference is that for Go there is likely a build pipeline set up, while for PHP most people can't even touch the binary, because they have a shared hoster. I would sure love to be able to just recompile PHP right now.