From https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/

In 2024, a potential exploit for the OOM problem was theorized, but no concrete vectors were found and other concrete issues with clear impact overshadowed these concerns.

...

Calif began an audit of PHP on July 30th, 2026. On August 11th researcher Ryan A at Calif reported an unconditional remote code execution with the same root cause as the OOM problem we had found in 2024. OpenAI independently reported the same root cause on the same day

Strange coincidence. Resolves YES if OpenAI's discovery is found to have depended on reading chats with security researchers working on the problem and was not in fact independent.

Credible reporting/admission/whistleblower reports all count. Otherwise NO on close date. I won't bet.