No patch is coming for the PHP2Shell RCEs on PHP 7.4, 8.0 and 8.1. Not a bug, a dead stack.
Today: move to 8.2+, set session.upload_progress.enabled=0, ask your host what they actually patched.
Write to us today, in one day you get the cost and the week count to get off PHP.