BREAKING: Cran warns about PHP vulnerability