Informational advisory: Session upload progress

We suggest you set until the next regular bugfix release, to fully protect from an unlikely RCE vector. This setting was already listed as a mitigation in the advisory for CVE-2026-109619 published on Oct 21st, 2026. If you applied it then, keep it in place and no further action is needed. session.upload_progress.enabled=0 GHSA-6wmf-4rv5-p3rp The issue can only occur under an unusual combination of configuration and application code. An application must set to or in its configuration and then switch it to at runtime with before calling . Session upload progress must also still be enabled. App…

PHP News에서 읽기

2026. 10. 23. 오후 07:12, PHP News에서 "Informational advisory: Session upload progress"을(를) 게시했습니다 (유형: 릴리스·공지). 관련 기술: PHP. CVE: CVE-2026-109619.