AI models that can find software flaws quickly put pressure on this process. OpenAI says the fix for the PHP2Shell flaws was coordinated over two months in five phases and proposes the approach as a repeatable framework. See our report on the PHP2Shell vulnerabilities.
AI Glossary
Coordinated vulnerability disclosure
A process in which a security flaw is reported privately to its maintainers and made public only after a fix is ready, giving defenders time to patch.
Participants often include the software's developers, the researchers who found the flaw, infrastructure providers and government agencies. The goal is to shorten the window in which attackers can exploit a bug that has no patch.