Currently a critical vulnerability is out for PHP.

Most sites using our internal domain intrastructure all already patched at DNS level.

Initial assumed mitigations have already been applied to all servers, and the patch will be updated to all servers once it is officially released by PHP.