Originally published at Perl Weekly 796

Hi there,

While PHP developments are rushing to resolve "php2shell" RCE vulnerabilities ( CVE-2026-109618 and CVE-2026-109619 ) caused by memory corruption and stale worker states, professionals that have worked with Perl approach the event with mixed feelings. For years, both languages used a very similar approach towards utilising scripts, however, owing to PHP's implementation of multi-request process worker model, which can be found in both PHP-FPM and mod_php by Apache, PHP was constantly vulnerable to a number of state leak defects in the way that traditional CGI or PSGI/Plack architectures would have never experienced.

Now turning our attention from engineering defense to celebrating the community, a gentle reminder that registration and talk proposals are open for the London Perl & Raku Workshop (LPW) 2026 . The event is scheduled to take place on Saturday, November 21st, 2026, at The Cafe at Zoopla in Central London.…