Two things you can do now:

1. Turn off session upload progress

2. Block multipart requests at the web server

PHP core maintainers themselves have said that only upgrading PHP will be sufficient: https://phpc.social/@Girgias/117476477429221001

Gigachad 5 hours ago | parent | prev | next [-]

If you can afford it, shut down your PHP apps now until the patch is out.

rasz 3 hours ago | parent | prev [-]

>multipart requests

is this multipart request smuggling again?

	▲	edelbitter an hour ago \| parent [-]
		I think I see a way to overwrite suitable memory in the parser, so smuggling (as in: confusing another parser) would be purely for bonus points.