CVE Program registry · hourly check
Yes
Chainguard still holds a CVE Numbering Authority slot. The company that shipped PHP fixes six hours early, out of an embargo it had agreed to, still assigns the identifiers everyone else coordinates around.
- Last checked
- Registry record
- CNA-2026-0068 · Chainguard, Inc.
- History
- a CNA since 23 Oct 2026 19:03 UTC
- Source
- CNAsList.json · status.json
Why this site exists, and what happened to the PHP 8.5.12 embargo on 21 October 2026.