The developers of the PHP programming language released two patches to fix “critical vulnerabilities” discovered this week.