Chainguard PHP flaw leak