Potential third critical PHP CVE — Blankdot