Chainguard CTO Defends Breaking PHP Security Embargo at KubeCon

At KubeCon + CloudNativeCon North America 2026 in Salt Lake City, Chainguard co-founder and CTO Matt Moore defended the company's decision to break a PHP security embargo. He said, "We own the decision." The excerpt does not give the vulnerability details or the embargo timeline.

Why it matters: Teams that consume open-source container images need to understand how vendors handle coordinated vulnerability disclosure, since early public release of a fix can change their patching windows and risk exposure.