We have seen no evidence that any of Castor's systems were impacted by the disclosed PHP vulnerabilities.

As no new official advisories have been published and no credible or confirmed reports have been made of any remaining vulnerabilities of this class, we feel confident in marking this as resolved now.