PHP is used by nearly 70% of websites where the server-side language is known.
Today it patched 2 critical vulnerabilities rated 9.2/10 that can allow unauthenticated remote code execution.
We have a huge security problem. The impending quantum transition adds another one.