最新のセキュリティ情報
8 ページ目
3月14日(金)
PHP Conference Odawara 2025
PHP Conference Odawara is back for its second run!🍥 This time, we're excited to welcome Saki Takamachi (RM) as our keynote speaker. While talks will remain at the heart of the conference, we’re also planning interactive sessions designed to spark communication among fellow engineers. Join us in Odawara again to share in the excitement of PHP and connect with passionate community members. (This conference will be conducted in Japanese) Basic information 🌸 Date: April 12, 2025 (JST) 🏯 Location: Odawara Civic Exchange Center "UMECO", Kanagawa Prefecture, Japan For more information, see the ev…
PHP 8.2.28 Released!
The PHP development team announces the immediate availability of PHP 8.2.28. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.32 Released!
The PHP development team announces the immediate availability of PHP 8.1.32. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.32 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
3月13日(木)
PHP 8.4.5 Released!
The PHP development team announces the immediate availability of PHP 8.4.5. This is a security release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.5 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHPKonf 2025
What is PHPKonf PHPKonf, the signature event of Istanbul PHP, is a landmark for PHP enthusiasts around the world. Now stepping into its 9th year, this annual conference is renowned for its dedication to spreading knowledge and building connections within the PHP community. Join us at PHPKonf, where PHP meets Istanbul. Date: May 17, 2025 in Istanbul, Turkiye. For more information about the event, visit the website: PHPKonf 2025
2月22日(土)
Laravel Cloud is live! Can you ship in 1 minute?
Today we shipped Laravel Cloud, Starter Kits (React, Vue, & Livewire), VS Code Extension, and Laravel 12.
2月20日(木)
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget Chain Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-31674 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Arbitrary File Inclusion. Techniques exist to escalate this attack to Remote Code Execution. It is not directly exploitable. This is…
Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002
Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Access bypass Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-31673 Description: Bulk operations allow authorized users to modify several nodes at once from the Content page ( /admin/content ). A site builder can also add bulk operations to other pages using Views. A bug in the core Actions system allows some users to modify some fiel…
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Critical 17 ∕ 25 AC:Basic/A:None/CI:Some/II:Some/E:Proof/TD:All Vulnerability: Cross site scripting Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-3057 Description: Drupal core doesn't sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability (XSS). Sites are encouraged to update. There are not yet public documented steps to exploit this, but there may be soon given th…
2月14日(金)
PHP 8.3.17 Released!
The PHP development team announces the immediate availability of PHP 8.3.17. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.4 Released!
The PHP development team announces the immediate availability of PHP 8.4.4. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
1月31日(金)
PHP Velho Oeste 2025
The is a national-level conference that takes place annually in the West of Santa Catarina, Brazil, known as Velho Oeste(Old West). PHP Velho Oeste Knowledge + Networking In this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends. Date: May 30-31, 2025 Location: Unochapecó Noble Hall in Chapecó, Santa Catarina, Brazil. See how it was last year: . PHP Velho Oeste 2024 Follow us on social media: / / . LinkedIn Instagram X
1月29日(水)
PHP Tek 2025
Join us for the 17th Annual Web Developer Conference, PHP Tek 2025, May 20-22 2025. PHP Tek 2025 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professionally while also providing you with the knowledge to solve your everyday problems. We are the longest-running web developer conference in the United States, focusing on the PHP programming language. The event is broken up into multiple days. The main conference happens over the course of 3 days (May 20-22) and includes keynotes, talks, and networking…
1月17日(金)
PHPerKaigi 2025
PHPerKaigi 2025, Nakano, Tokyo, Japan Date: Mar 21 - 23, 2025 PHPerKaigi is an event for PHPers, that is, those who are currently using PHP, those who have used PHP in the past, those who want to use PHP in the future, and those who love PHP, to share technical know-how and "" for PHP. #love The conference consists of talk sessions by public speakers. In addition to we have unconference, social gathering and so on for all of developers from all from Japan. Let's talk about PHP! Follow us on X (Formerly Twitter) , . @phperkaigi #phperkaigi https://phperkaigi.jp/2025/ Note: *Kaigi* means meetin…
PHP 8.4.3 Released!
The PHP development team announces the immediate availability of PHP 8.4.3. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.16 Released!
The PHP development team announces the immediate availability of PHP 8.3.16. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
1月13日(月)
API Platform Conference 2025
We are thrilled to announce that the API Platform Conference will return on September 18th and 19th, 2025, both in Lille (France) and online. The API Platform Conference is a two-day event that highlights the latest trends, best practices, and case studies related to API Platform and its ecosystem, including PHP, Symfony, JavaScript, AI, FrankenPHP, performance, and tools. With nearly 30 talks delivered in both English and French, the conference is a must-attend for innovative companies, project leaders, and skilled developers. If you're a developer, CTO, or decision-maker specializing in the…
1月9日(木)
Laravel Live Denmark 2025
Information: Laravel Live Denmark is back! The conference is a two-day Laravel conference held in Copenhagen, Denmark on the 21 - 22. August 2025. Join us and 300 other Laravel and PHP enthusiasts from around the world got for two days of learning, 16 speakers and more within the Laravel community. August 21-22, 2025 Copenhagen, Denmark 16 speakers +300 Laravel and PHP enthusiasts For more information, see . Laravel Live Denmark 2025 You can also find us at . Twitter
12月31日(火)
Web Summer Camp 2025
Web Summer Camp is a unique for web professionals, focused on providing . It is set in a relaxed summer environment, offering a full-day program with numerous opportunities for learning and sharing experiences with web designers, developers, founders, and other web aficionados. The program will be divided into . Other tracks include Javascript, Python, UX, etc. 3-day international conference intensive knowledge exchange and hands-on workshops six tracks, one being focused on PHP The nextedition will be held on . Call for papers is open till March 15th 2025. For more information see the web si…
12月20日(金)
PHP 8.4.2 Released!
The PHP development team announces the immediate availability of PHP 8.4.2. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.15 Released!
The PHP development team announces the immediate availability of PHP 8.3.15. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.27 Released!
The PHP development team announces the immediate availability of PHP 8.2.27. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog Please note, this is the last bug-fix release for the 8.2.x series. Security fix support will continue until 31 Dec 2026. For more information, please check our page. Supported Versions
12月18日(水)
Laravel Nova 5.0 Now Available
Laravel Nova 5.0 is now ready for upgrade. This release focuses on modernizing Nova's core dependencies while introducing several useful features to improve resource management and field handling.
12月14日(土)
Announcing Inertia 2.0: Redefining Frontend Development for Laravel
Inertia 2.0 brings powerful new features to Laravel frontend development including async requests, deferred props, prefetching, and polling. Learn how these improvements help you build faster, more responsive applications without the complexity of maintaining a separate API.
12月13日(金)
International PHP Conference Berlin 2025
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: June 2 ‒ 6, 2025 Location: Maritim ProArte Hotel Berlin, Berlin or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPower: Hands-…
12月10日(火)
ConFoo 2025
ConFoo is back for its 23rd edition, at Hotel Bonaventure in Montreal, with a full stack of incredible talks with the best speakers in tech. You can check our newest program right now on our website With over , offered by over a hundred local and international speakers, ConFoo took on the mission to bring an outstanding diversity of content to expand your knowledge, increase your productivity and boost your development skills. 190 presentations This year schedule is especially important for those looking to learn the latest news in cutting edge technologies and get better with their . PHP ski…
12月6日(金)
phpday 2025 - Call For Papers
phpday is the annual gathering for developers, professionals, and PHP enthusiasts, dedicated to sharing insights, expertise, and advancements in web programming. The event offers a mix of technical sessions, hands-on workshops, and networking with industry leaders. Now in its 22nd year, phpday has been held continuously since 2003. The 2025 edition will be hosted in Verona on May 15-16. The is now open! Call For Papers At phpday, attendees can explore the latest trends and best practices in PHP development, enhancing their technical skills and keeping their design and development teams at the…
12月4日(水)
PHP Conference Japan 2024
Date: December 22, 2024 (JST) Location: Ota Tokyo, Japan. the largest PHP event in Japan. PHP Conference Japan 2024 The first PHP Conference Japan was held in 2000 by PHP user group in Japan, and this year marks the 25th edition of the event. We have prepared enjoyable programs for all PHPers, from beginners to advanced users. For more information, see . PHP Conference Japan 2024 Follow us on 𝕏 #phpcon
12月3日(火)
PHP Conference Nagoya 2025
PHP Conference Nagoya will be held for the first time in 2025. The conference aims to promote interaction between Nagoya engineers and engineers across the country, and to bring a breath of fresh air to the Nagoya engineering community. (This conference will be conducted in Japanese.) Basic facts Date: February 22, 2025 (JST) Location: Nagoya City, Aichi Prefecture, Japan For more information, see . PHP Conference Nagoya 2025 Follow us on . 𝕏
11月22日(金)
Vapor: PHP 8.4 Is Now Supported
Starting today, you may use PHP 8.4 in your Vapor environments. To get started, simply specify "php-8.4:al2" as your preferred runtime in your "vapor.yml" configuration file.
11月21日(木)
PHP 8.4.1 Released!
The PHP development team announces the immediate availability of PHP 8.4.1. This release marks the latest minor release of the PHP language. PHP 8.4 comes with numerous improvements and new features such as: Property Hooks Asymmetric Property Visibility Lazy Objects PDO driver-specific subclasses BCMath object type And much much more... For source downloads of PHP 8.4.1 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog The is available in the PHP Manual. Please consult it for the detaile…
PHP 8.1.31 Released!
The PHP development team announces the immediate availability of PHP 8.1.31. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.31 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.14 Released!
The PHP development team announces the immediate availability of PHP 8.3.14. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.14 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.26 Released!
The PHP development team announces the immediate availability of PHP 8.2.26. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.26 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >=7.0 < 7.102 || >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 CVE IDs: CVE-2024-55638 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must…
Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-55637 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability…
Drupal core - Less critical - Gadget chain - SA-CORE-2024-006
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Less critical 8 ∕ 25 AC:Complex/A:User/CI:None/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-55636 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Artbitrary File Deletion. It is not directly exploitable. This issue is mitigated by the fact that in order to be exploitable, a separate vulnerability must be p…
Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Critical 17 ∕ 25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >=7.0 <7.102 CVE IDs: CVE-2024-55635 Description: Drupal 7 core's Overlay module doesn't safely handle user input, leading to reflected cross-site scripting under certain circumstances. Only sites with the Overlay module enabled are affected by this vulnerability. Solution: Install the latest version: If you are using Drupal 7, update to Drupal 7.102 Sites may also disable the Ove…
Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:User/CI:None/II:Some/E:Theoretical/TD:Default Vulnerability: Access bypass Affected versions: >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-55634 Description: Drupal's uniqueness checking for certain user fields is inconsistent depending on the database engine and its collation. As a result, a user may be able to register with the same email address as another user. This may lead to data integrity issues. Solution: Install the latest…
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >= 8.8.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-12393 Description: Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. Solution: Install the latest version: If you are using Drupal 10.2, update to Drupal 10.2.11. If you are using Drup…
11月14日(木)
Laracon AU 2024: Nightwatch Unveiled
This 6th annual Laracon AU brought together the biggest crowd in Australia yet. After months of teasing a new Laravel product, Taylor and Jess announced Nightwatch, a fully managed application monitoring platform for Laravel.
11月8日(金)
PHP 8.4.0 RC4 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC4. This is the fourth release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
10月24日(木)
PHP 8.4.0 RC3 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC3. This is the third release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be f…
PHP 8.2.25 Released!
The PHP development team announces the immediate availability of PHP 8.2.25. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.25 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.13 Released!
The PHP development team announces the immediate availability of PHP 8.3.13. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.13 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
10月17日(木)
Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002
Project: Drupal core Project machine name: drupal Date: 2024-October-16 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:None/II:All/E:Theoretical/TD:Uncommon Vulnerability: Improper error handling Affected versions: >=10.0 < 10.2.10 CVE IDs: CVE-2024-11942 Description: Under certain uncommon site configurations, a bug in the CKEditor 5 module can cause some image uploads to move the entire webroot to a different location on the file system. This could be exploited by a malicious user to take down a site. The issue is mitigated by the fact that several non-default site configurat…
10月10日(木)
PHP 8.4.0 RC2 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC2. This is the second release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
10月8日(火)
Taylor’s Morning Routine & Laravel’s Open Source Pledge
I start every morning by opening up a GitHub search that shows me [all the open pull requests](https://github.com/search?q=org%3Alaravel+is%3Apr+is%3Aopen) across Laravel's open source ecosystem. It’s...
9月27日(金)
PHP 8.1.30 Released!
The PHP development team announces the immediate availability of PHP 8.1.30. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.30 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.0 RC 1 now available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC 1. This is the first release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…