Offline until PHP (CVE-2026-109618 / -109619) is fixed