https://github.com/php/php-src/commit/01a40e89fbfc499936e3b0...

What everyone is looking for.

Really makes me appreciate using language with exceptions and not that crazy "manually check if error handling is required - and do it everywhere". The fix adds:

    if (ZEND_HAS_OOM()) {
        goto oom_nodeset;
    }
all over the codebase.

Gosh. Let's hope they didn't miss a place.

It says "3 days ago". The tag is 2 days old.

I assume it just got pushed?

Yeah… it was patched in the source 3 days ago. Check the linked GHSA.