Informational advisory: Session upload progress

We suggest you set until the next regular bugfix release, to fully protect from an unlikely RCE vector. This setting was already listed as a mitigation in the advisory for CVE-2026-109619 published on Oct 21st, 2026. If you applied it then, keep it in place and no further action is needed. session.upload_progress.enabled=0 GHSA-6wmf-4rv5-p3rp The issue can only occur under an unusual combination of configuration and application code. An application must set to or in its configuration and then switch it to at runtime with before calling . Session upload progress must also still be enabled. App…

PHP Newsで読む

2026/10/23 19:12、PHP Newsが「Informational advisory: Session upload progress」を公開しました (種別: リリース・告知)。関連する技術: PHP。CVE: CVE-2026-109619。