zend_throw_or_error() format string vulnerability

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original