Version 11.5.50 - 2026-01-27 Changed To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

Source: Fedora 42 phpunit11 Important Arbitrary Code Execution Vulner 2026-24765