A fix was delivered June 6 with the release of PHP versions 8.3.8, 8.2.20, and 8.1.29. On Friday, a day after the patch, WatchTowr Labs released proof-of-concept (PoC) exploit code for CVE-2024-4557 .