취약점·업데이트
7페이지
7월 4일 (금)
PHP 8.5.0 Alpha 1 available for testing
The PHP team is pleased to announce the first testing release of PHP 8.5.0, Alpha 1. This starts the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 Alpha 1 please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEW…
PHP 8.3.23 Released!
The PHP development team announces the immediate availability of PHP 8.3.23. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
7월 3일 (목)
PHP 8.1.33 Released!
The PHP development team announces the immediate availability of PHP 8.1.33. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.33 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.29 Released!
The PHP development team announces the immediate availability of PHP 8.2.29. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.10 Released!
The PHP development team announces the immediate availability of PHP 8.4.10. This is a security release. Version 8.4.9 was skipped because it was tagged without including security patches. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
6월 25일 (수)
Nightwatch Found 78K Exceptions in 2.7B Events on Forge
How we tested Laravel monitoring using Nightwatch on Forge to surface real-world insights from 2.76 billion events.
6월 24일 (화)
Building a Multi-Tenant Architecture Platform to Scale the Emmys
How Crowd Favorite built their multi-tenant Emmy Awards management platform and scaled it to handle user spikes of up to 570%.
6월 20일 (금)
Dropping security updates for WordPress versions 4.1 through 4.6
As of July 2025, the WordPress Security Team will no longer provide security updates for WordPress versions 4.1 through 4.6. These versions were first released nine or more years ago and over 99% of WordPress installations run a more recent version. The chances this will affect your site, or sites, is very small. If you […]
6월 17일 (화)
160+ Servers. 550M+ HTTP Requests. Geocodio Monitors with Laravel Nightwatch
Read how Geocodio uses Nightwatch for Laravel performance monitoring in production, unearthing issues across 160+ servers with zero system impact.
Announcing Laravel Nightwatch
Nightwatch is a monitoring solution for Laravel applications. See how to track and solve issues like slow controllers, failing jobs, and timed-out API endpoints.
6월 11일 (수)
CakeFest 2025 Madrid: The Official CakePHP Conference
CakeFest is the official conference dedicated to the framework and community. Whether you're a seasoned developer or just starting out, CakeFest offers two days of workshops, talks, networking, and learning from top contributors and professionals in the ecosystem. CakePHP CakePHP In 2025, we’re celebrating 20 years of - a major milestone in open-source history! CakePHP Quick links: CakeFest 2025 Schedule Get your CakeFest ticket Join us in Madrid for this special anniversary edition of CakeFest: connect with fellow developers, discover the latest in , and enjoy an unforgettable community expe…
6월 9일 (월)
Longhorn PHP 2025 - Call For Papers
Longhorn PHP returns for 2025! Held in Austin, TX, the conference will run from October 23-25, with a tutorial day on Thursday, followed by two main conference days. We are excited to bring PHP developers from all backgrounds together again for three days of fun and education. While the CFP is open, we also have our Blind Bird tickets available for sale. We are currently accepting talk and tutorial submissions. Register today! Follow us on signup for emails at to get notified with important conference updates. Mastodon longhornphp.com
6월 6일 (금)
International PHP Conference Munich 2025
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: October 27 ‒ 31, 2025 Location: Munich or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPower: Hands-on Power Workshops Expo w…
PHP 8.3.22 Released!
The PHP development team announces the immediate availability of PHP 8.3.22. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.8 Released!
The PHP development team announces the immediate availability of PHP 8.4.8. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.8 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
6월 4일 (수)
PHPverse 2025
Celebrate 30 Years of PHP at PHPverse! PHP turns 30 this year, and the community is coming together to celebrate. PHPverse is a global online event organized by JetBrains, featuring talks, stories, and demos from prominent community leaders. Whether you’ve been writing PHP for decades or just joined the party, you’re invited! 📅 📍 – free and open to everyone June 17, 2025 Online and be part of the celebration! Join PHPverse
5월 29일 (목)
Laravel Certification: Does It Make You a Better Developer?
There's no official Laravel certification. Taylor Otwell explains why it barely matters and the three steps that actually build real skill.
5월 12일 (월)
PHP Conference Kansai 2025
We are excited to announce the PHP Conference Kansai 2025. 🎉 PHP Conference Kansai is a large-scale technical conference in Japan for PHP engineers to share their technical knowledge and experiences in and around PHP. It has been held 9 times in the past since 2011, and each time the topic is the latest information and trends in PHP at that time. Following the 2024 event, which was held for the first time in six years, this will be the second consecutive year of the conference. On the day of the event, there will be lectures by engineers who have been invited from the general public, as well…
5월 9일 (금)
PHP 8.3.21 Released!
The PHP development team announces the immediate availability of PHP 8.3.21. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.21 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
How Emmy® Award Competitions handled 570% more users with Laravel
Developers at Crowd Favorite used Laravel to modernize the Emmy® Awards system and unlock the scalability the Emmys needed to grow 10x in just two years.
5월 8일 (목)
PHP 8.4.7 Released!
The PHP development team announces the immediate availability of PHP 8.4.7. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.7 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
5월 1일 (목)
5 Tools to Estimate Your Laravel Cloud Bill
Discover 5 essential tools to estimate and manage your Laravel Cloud costs: Interactive Pricing Calculator, Live Invoice Preview, Detailed Usage Dashboard, Clear Pricing Documentation, and upcoming Usage Alerts. Learn how to make usage-based pricing predictable and easy to understand.
4월 11일 (금)
PHP 8.4.6 Released!
The PHP development team announces the immediate availability of PHP 8.4.6. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.6 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.20 Released!
The PHP development team announces the immediate availability of PHP 8.3.20. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.20 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
4월 10일 (목)
PHP Core Undergoes Security Audit – Results Now Available
A focused security audit of the PHP source code () was recently completed, commissioned by the , organized by in partnership with , and performed by . The audit targeted the most critical parts of the codebase, leading to 27 findings, 17 with security implications, including four CVEs. php/php-src Sovereign Tech Agency The PHP Foundation OSTIF Quarkslab All issues have been addressed by the PHP development team. Users are encouraged to upgrade to the latest PHP versions to benefit from these security improvements. Read the full . More details in . audit report the PHP Foundation blog post If…
3월 26일 (수)
Laravel Cloud achieves SOC 2 Type 1 Compliance
SOC 2 Type 1 compliance achieved with SOC 2 Type 2 coming soon for Laravel Cloud as well as Laravel Forge and Laravel Nightwatch.
3월 20일 (목)
Laravel Starter Kits: A New Beginning for Your Next Project
We’ve overhauled our starter kits, replacing Jetstream and Breeze with three distinct, purpose-built starter kits in Livewire, React, and Vue. These new kits allow you to focus on building your app instead of creating boilerplate code from scratch.
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Project: Drupal core Project machine name: drupal Date: 2025-March-19 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >= 8.0.0 < 10.3.14 || >= 10.4.0 < 10.4.5 || >= 11.0.0 < 11.0.13 || >= 11.1.0 < 11.1.5 CVE IDs: CVE-2025-31675 Description: Drupal core Link field attributes are not sufficiently sanitized, which can lead to a Cross Site Scripting vulnerability (XSS). This vulnerability is mitigated by that fact that an attacker would need to have the ability to add specific attributes to…
3월 14일 (금)
PHP Conference Odawara 2025
PHP Conference Odawara is back for its second run!🍥 This time, we're excited to welcome Saki Takamachi (RM) as our keynote speaker. While talks will remain at the heart of the conference, we’re also planning interactive sessions designed to spark communication among fellow engineers. Join us in Odawara again to share in the excitement of PHP and connect with passionate community members. (This conference will be conducted in Japanese) Basic information 🌸 Date: April 12, 2025 (JST) 🏯 Location: Odawara Civic Exchange Center "UMECO", Kanagawa Prefecture, Japan For more information, see the ev…
PHP 8.2.28 Released!
The PHP development team announces the immediate availability of PHP 8.2.28. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.1.32 Released!
The PHP development team announces the immediate availability of PHP 8.1.32. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.32 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
3월 13일 (목)
PHP 8.4.5 Released!
The PHP development team announces the immediate availability of PHP 8.4.5. This is a security release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.5 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHPKonf 2025
What is PHPKonf PHPKonf, the signature event of Istanbul PHP, is a landmark for PHP enthusiasts around the world. Now stepping into its 9th year, this annual conference is renowned for its dedication to spreading knowledge and building connections within the PHP community. Join us at PHPKonf, where PHP meets Istanbul. Date: May 17, 2025 in Istanbul, Turkiye. For more information about the event, visit the website: PHPKonf 2025
2월 22일 (토)
Laravel Cloud is live! Can you ship in 1 minute?
Today we shipped Laravel Cloud, Starter Kits (React, Vue, & Livewire), VS Code Extension, and Laravel 12.
2월 20일 (목)
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget Chain Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-31674 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Arbitrary File Inclusion. Techniques exist to escalate this attack to Remote Code Execution. It is not directly exploitable. This is…
Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002
Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Access bypass Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-31673 Description: Bulk operations allow authorized users to modify several nodes at once from the Content page ( /admin/content ). A site builder can also add bulk operations to other pages using Views. A bug in the core Actions system allows some users to modify some fiel…
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Critical 17 ∕ 25 AC:Basic/A:None/CI:Some/II:Some/E:Proof/TD:All Vulnerability: Cross site scripting Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-3057 Description: Drupal core doesn't sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability (XSS). Sites are encouraged to update. There are not yet public documented steps to exploit this, but there may be soon given th…
2월 14일 (금)
PHP 8.3.17 Released!
The PHP development team announces the immediate availability of PHP 8.3.17. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.4 Released!
The PHP development team announces the immediate availability of PHP 8.4.4. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
1월 31일 (금)
PHP Velho Oeste 2025
The is a national-level conference that takes place annually in the West of Santa Catarina, Brazil, known as Velho Oeste(Old West). PHP Velho Oeste Knowledge + Networking In this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends. Date: May 30-31, 2025 Location: Unochapecó Noble Hall in Chapecó, Santa Catarina, Brazil. See how it was last year: . PHP Velho Oeste 2024 Follow us on social media: / / . LinkedIn Instagram X
1월 29일 (수)
PHP Tek 2025
Join us for the 17th Annual Web Developer Conference, PHP Tek 2025, May 20-22 2025. PHP Tek 2025 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professionally while also providing you with the knowledge to solve your everyday problems. We are the longest-running web developer conference in the United States, focusing on the PHP programming language. The event is broken up into multiple days. The main conference happens over the course of 3 days (May 20-22) and includes keynotes, talks, and networking…
1월 17일 (금)
PHPerKaigi 2025
PHPerKaigi 2025, Nakano, Tokyo, Japan Date: Mar 21 - 23, 2025 PHPerKaigi is an event for PHPers, that is, those who are currently using PHP, those who have used PHP in the past, those who want to use PHP in the future, and those who love PHP, to share technical know-how and "" for PHP. #love The conference consists of talk sessions by public speakers. In addition to we have unconference, social gathering and so on for all of developers from all from Japan. Let's talk about PHP! Follow us on X (Formerly Twitter) , . @phperkaigi #phperkaigi https://phperkaigi.jp/2025/ Note: *Kaigi* means meetin…
PHP 8.4.3 Released!
The PHP development team announces the immediate availability of PHP 8.4.3. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.16 Released!
The PHP development team announces the immediate availability of PHP 8.3.16. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
1월 13일 (월)
API Platform Conference 2025
We are thrilled to announce that the API Platform Conference will return on September 18th and 19th, 2025, both in Lille (France) and online. The API Platform Conference is a two-day event that highlights the latest trends, best practices, and case studies related to API Platform and its ecosystem, including PHP, Symfony, JavaScript, AI, FrankenPHP, performance, and tools. With nearly 30 talks delivered in both English and French, the conference is a must-attend for innovative companies, project leaders, and skilled developers. If you're a developer, CTO, or decision-maker specializing in the…
1월 9일 (목)
Laravel Live Denmark 2025
Information: Laravel Live Denmark is back! The conference is a two-day Laravel conference held in Copenhagen, Denmark on the 21 - 22. August 2025. Join us and 300 other Laravel and PHP enthusiasts from around the world got for two days of learning, 16 speakers and more within the Laravel community. August 21-22, 2025 Copenhagen, Denmark 16 speakers +300 Laravel and PHP enthusiasts For more information, see . Laravel Live Denmark 2025 You can also find us at . Twitter
12월 31일 (화)
Web Summer Camp 2025
Web Summer Camp is a unique for web professionals, focused on providing . It is set in a relaxed summer environment, offering a full-day program with numerous opportunities for learning and sharing experiences with web designers, developers, founders, and other web aficionados. The program will be divided into . Other tracks include Javascript, Python, UX, etc. 3-day international conference intensive knowledge exchange and hands-on workshops six tracks, one being focused on PHP The nextedition will be held on . Call for papers is open till March 15th 2025. For more information see the web si…
12월 20일 (금)
PHP 8.4.2 Released!
The PHP development team announces the immediate availability of PHP 8.4.2. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.15 Released!
The PHP development team announces the immediate availability of PHP 8.3.15. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.27 Released!
The PHP development team announces the immediate availability of PHP 8.2.27. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog Please note, this is the last bug-fix release for the 8.2.x series. Security fix support will continue until 31 Dec 2026. For more information, please check our page. Supported Versions