php-src
php-8.5.12The PHP Interpreter
- Maintenance
- Active2516 commits in 3 months · bus factor 10
- License
- BSD-3-ClausePermissive · OSI-approved
- Security
- 30 advisories2 critical, 7 high, 16 medium, 5 low · Scorecard 5.4/10
- Supported versions
- No scheduleendoflife.date does not track this project
41.8k stars · 8.5k forks · 2.3k open issues · last release 25 days ago · data checked 3 hours ago
Release history
All releases on GitHubPHP 8.2.35
The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encouraged to update immediately.
There are no complete mitigations, updating is the only safe choice. See the security advisory for details.
PHP 8.2 reaches end of life on 31 December 2026 and will receive no further security fixes after that date. Please plan your upgrade to a supported version.
For source downloads of PHP 8.2.35 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.