Commit 26846b95cb4 for php.net

commit 26846b95cb44b62c562234d1ce52f924ead042d0
Author: Alexandre Daubois <2144837+alexandre-daubois@users.noreply.github.com>
Date:   Tue Sep 8 20:29:57 2026 +0200

    [skip ci] Add more rejected examples in SECURITY.md (#23608)

diff --git a/SECURITY.md b/SECURITY.md
index 24801b3b4e4..b6337a80bdc 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -36,6 +36,13 @@ are not limited to):

 - Malicious `unserialize()` inputs.

+- Memory exhaustion from a size the input declares, where `memory_limit`
+  refuses the allocation and only the current request dies.
+
+When creating reports, please **skip** the theatrics. Drop the impact essay,
+send a short reproducer with the few lines that matter, and make each point
+once. This allows us to triage and respond to your report quickly.
+
 # Vulnerability Policy

 Our full policy is described at