security
phpMyFAQ ships 28 security fixes, then publishes the receipts
A coordinated 28-CVE disclosure in the self-hosted FAQ application phpMyFAQ is dominated by a critical WebAuthn authentication bypass. The patch shipped 14 days before the public advisories landed, which changes how you should read the disclosure.