Vulnerabilities & updates
Page 8
Fri, December 20
PHP 8.3.15 Released!
The PHP development team announces the immediate availability of PHP 8.3.15. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.27 Released!
The PHP development team announces the immediate availability of PHP 8.2.27. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog Please note, this is the last bug-fix release for the 8.2.x series. Security fix support will continue until 31 Dec 2026. For more information, please check our page. Supported Versions
Wed, December 18
Laravel Nova 5.0 Now Available
Laravel Nova 5.0 is now ready for upgrade. This release focuses on modernizing Nova's core dependencies while introducing several useful features to improve resource management and field handling.
Sat, December 14
Announcing Inertia 2.0: Redefining Frontend Development for Laravel
Inertia 2.0 brings powerful new features to Laravel frontend development including async requests, deferred props, prefetching, and polling. Learn how these improvements help you build faster, more responsive applications without the complexity of maintaining a separate API.
Fri, December 13
International PHP Conference Berlin 2025
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: June 2 ‒ 6, 2025 Location: Maritim ProArte Hotel Berlin, Berlin or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPower: Hands-…
Tue, December 10
ConFoo 2025
ConFoo is back for its 23rd edition, at Hotel Bonaventure in Montreal, with a full stack of incredible talks with the best speakers in tech. You can check our newest program right now on our website With over , offered by over a hundred local and international speakers, ConFoo took on the mission to bring an outstanding diversity of content to expand your knowledge, increase your productivity and boost your development skills. 190 presentations This year schedule is especially important for those looking to learn the latest news in cutting edge technologies and get better with their . PHP ski…
Fri, December 6
phpday 2025 - Call For Papers
phpday is the annual gathering for developers, professionals, and PHP enthusiasts, dedicated to sharing insights, expertise, and advancements in web programming. The event offers a mix of technical sessions, hands-on workshops, and networking with industry leaders. Now in its 22nd year, phpday has been held continuously since 2003. The 2025 edition will be hosted in Verona on May 15-16. The is now open! Call For Papers At phpday, attendees can explore the latest trends and best practices in PHP development, enhancing their technical skills and keeping their design and development teams at the…
Wed, December 4
PHP Conference Japan 2024
Date: December 22, 2024 (JST) Location: Ota Tokyo, Japan. the largest PHP event in Japan. PHP Conference Japan 2024 The first PHP Conference Japan was held in 2000 by PHP user group in Japan, and this year marks the 25th edition of the event. We have prepared enjoyable programs for all PHPers, from beginners to advanced users. For more information, see . PHP Conference Japan 2024 Follow us on 𝕏 #phpcon
Tue, December 3
PHP Conference Nagoya 2025
PHP Conference Nagoya will be held for the first time in 2025. The conference aims to promote interaction between Nagoya engineers and engineers across the country, and to bring a breath of fresh air to the Nagoya engineering community. (This conference will be conducted in Japanese.) Basic facts Date: February 22, 2025 (JST) Location: Nagoya City, Aichi Prefecture, Japan For more information, see . PHP Conference Nagoya 2025 Follow us on . 𝕏
Fri, November 22
Vapor: PHP 8.4 Is Now Supported
Starting today, you may use PHP 8.4 in your Vapor environments. To get started, simply specify "php-8.4:al2" as your preferred runtime in your "vapor.yml" configuration file.
Thu, November 21
PHP 8.4.1 Released!
The PHP development team announces the immediate availability of PHP 8.4.1. This release marks the latest minor release of the PHP language. PHP 8.4 comes with numerous improvements and new features such as: Property Hooks Asymmetric Property Visibility Lazy Objects PDO driver-specific subclasses BCMath object type And much much more... For source downloads of PHP 8.4.1 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog The is available in the PHP Manual. Please consult it for the detaile…
PHP 8.1.31 Released!
The PHP development team announces the immediate availability of PHP 8.1.31. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.31 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.14 Released!
The PHP development team announces the immediate availability of PHP 8.3.14. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.14 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.26 Released!
The PHP development team announces the immediate availability of PHP 8.2.26. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.26 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >=7.0 < 7.102 || >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 CVE IDs: CVE-2024-55638 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must…
Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-55637 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability…
Drupal core - Less critical - Gadget chain - SA-CORE-2024-006
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Less critical 8 ∕ 25 AC:Complex/A:User/CI:None/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-55636 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Artbitrary File Deletion. It is not directly exploitable. This issue is mitigated by the fact that in order to be exploitable, a separate vulnerability must be p…
Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Critical 17 ∕ 25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >=7.0 <7.102 CVE IDs: CVE-2024-55635 Description: Drupal 7 core's Overlay module doesn't safely handle user input, leading to reflected cross-site scripting under certain circumstances. Only sites with the Overlay module enabled are affected by this vulnerability. Solution: Install the latest version: If you are using Drupal 7, update to Drupal 7.102 Sites may also disable the Ove…
Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:User/CI:None/II:Some/E:Theoretical/TD:Default Vulnerability: Access bypass Affected versions: >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-55634 Description: Drupal's uniqueness checking for certain user fields is inconsistent depending on the database engine and its collation. As a result, a user may be able to register with the same email address as another user. This may lead to data integrity issues. Solution: Install the latest…
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003
Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >= 8.8.0 < 10.2.11 || >= 10.3.0 < 10.3.9 || >= 11.0.0 < 11.0.8 CVE IDs: CVE-2024-12393 Description: Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. Solution: Install the latest version: If you are using Drupal 10.2, update to Drupal 10.2.11. If you are using Drup…
Thu, November 14
Laracon AU 2024: Nightwatch Unveiled
This 6th annual Laracon AU brought together the biggest crowd in Australia yet. After months of teasing a new Laravel product, Taylor and Jess announced Nightwatch, a fully managed application monitoring platform for Laravel.
Fri, November 8
PHP 8.4.0 RC4 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC4. This is the fourth release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Thu, October 24
PHP 8.4.0 RC3 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC3. This is the third release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be f…
PHP 8.2.25 Released!
The PHP development team announces the immediate availability of PHP 8.2.25. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.25 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.13 Released!
The PHP development team announces the immediate availability of PHP 8.3.13. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.13 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, October 17
Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002
Project: Drupal core Project machine name: drupal Date: 2024-October-16 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:None/II:All/E:Theoretical/TD:Uncommon Vulnerability: Improper error handling Affected versions: >=10.0 < 10.2.10 CVE IDs: CVE-2024-11942 Description: Under certain uncommon site configurations, a bug in the CKEditor 5 module can cause some image uploads to move the entire webroot to a different location on the file system. This could be exploited by a malicious user to take down a site. The issue is mitigated by the fact that several non-default site configurat…
Thu, October 10
PHP 8.4.0 RC2 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC2. This is the second release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Tue, October 8
Taylor’s Morning Routine & Laravel’s Open Source Pledge
I start every morning by opening up a GitHub search that shows me [all the open pull requests](https://github.com/search?q=org%3Alaravel+is%3Apr+is%3Aopen) across Laravel's open source ecosystem. It’s...
Fri, September 27
PHP 8.1.30 Released!
The PHP development team announces the immediate availability of PHP 8.1.30. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.30 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.0 RC 1 now available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, RC 1. This is the first release candidate, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, RC 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
PHP 8.2.24 Released!
The PHP development team announces the immediate availability of PHP 8.2.24. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.24 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, September 26
PHP 8.3.12 Released!
The PHP development team announces the immediate availability of PHP 8.3.12. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.12 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Tue, September 17
Dutch PHP Conference 2025 - Call For Papers
🚀 Dutch PHP Conference 2025 is coming! 🚀 We’re thrilled to announce that the 19th edition of the Dutch PHP Conference will take place from March 18 to March 21, 2025 in Amsterdam! 🗓️ 🎤 Call for Papers is now OPEN! 🎤 Got insights, skills, or experience to share? Submit your talk ideas before the deadline on December 17th! We’re looking for both technical and non-technical sessions that will inspire and engage our community. Highlights: 👥 Expected attendance: around 800 📅 Conference dates: March 18 – 21, 2025 🎙️ 30-40 speaking slots available 🎟️ Early Bird Tickets Available Now! 🎟️ Do…
Fri, September 13
Herd 1.11 Now Available
We're thrilled to announce the next big step for Laravel Herd, making the best development environment for macOS and Windows users even better. This update ships an integration with Laravel Forge, a profiler, a way to store your project configuration in your repository, and massive improvements for the dump debugger.
Thu, September 12
PHP 8.4.0 Beta 5 available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, Beta 5. This is the third beta release, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, Beta 5 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Thu, September 5
Accel invests $57M into Laravel Products & Open-Source Framework
Laravel took a $57M Series A investment from Accel, Taylor Otwell continues to lead as CEO, & Laravel is doubling down on building powerful products for Web Artisans.
Fri, August 30
PHP 8.3.11 Released!
The PHP development team announces the immediate availability of PHP 8.3.11. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.11 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.0 Beta 4 now available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, Beta 4. This is the second beta release, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, Beta 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
PHP 8.2.23 Released!
The PHP development team announces the immediate availability of PHP 8.2.23. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Wed, August 28
API Platform Conference 2024
is an open-source PHP framework, designed to build modern, fast, and robust APIs thanks to its wide set of tools and features. It supports many formats and protocols, including JSON-LD, OpenAPI, and GraphQL, and is designed to streamline the developer experience. API Platform , the event dedicated to the API Platform framework and its ecosystem, is back and will be held in Lille, France, at EuraTechnologies (Europe's largest startup incubator and accelerator). The API Platform Conference On September 19th and 20th, 25 talks will be delivered, in English and in French. Also, many organizations…
Fri, August 16
PHP Russia 2024
PHP Russia is the only Russian conference focused on PHP. It will be held in Moscow December 2-3, 2024. Main topics are PHP ecosystem (PHP itself, standards, frameworks, libraries and OpenSource) and major players experience in building complex projects using best practices and modern approaches. We expect 600+ attendees and 20+ speakers! Our audience consists of applications developers, API developers, CTO’s, CEO’s, fullstack developers, etc. The program is designed by the developer community, representatives of large companies from Runet and around the world, and by tech developers and comm…
ConFoo Montreal 2025: Call for Papers
ConFoo is a multi-technology conference specifically crafted for developers. With over 150 presentations, offered by local and international speakers, this conference wish to bring outstanding diversity of content to expand developers knowledge, increase productivity and boost skills. Want to share your knowledge and expertise to hundreds of experts in your field? Want to be part of our talented team of renowned speakers? Want to demonstrate how human intelligence is changing our field of work? The team at ConFoo is looking for speakers and talk proposals for its 2025 event in Montreal. From…
Thu, August 15
PHP 8.4.0 Beta 3 now available for testing
The PHP team is pleased to announce the release of PHP 8.4.0, Beta 3. This is the first beta release, continuing the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0, Beta 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…
Fri, August 2
PHP 8.4.0 Alpha 4 available for testing
The PHP team is pleased to announce the second testing release of PHP 8.4.0, Alpha 4. This continues the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0 Alpha 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in th…
PHP 8.2.22 Released!
The PHP development team announces the immediate availability of PHP 8.2.22. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, August 1
PHP 8.3.10 Released!
The PHP development team announces the immediate availability of PHP 8.3.10. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Fri, July 19
CascadiaPHP 2024
Join us in Portland, Oregon fon Thursday-Saturday, October 24-26 in Portland, Oregon for the third (and first since 2019) edition of CascadiaPHP! We're excited to bring back a PHP conference run by and for the community to the Pacific Northwest. As with previous years, Portland State University's campus will be our venue. Attend for one, two, or three days, with a mix of talks and tutorials each day. before speakers are announced to get an extra discount. Purchase a ticket
Thu, July 18
PHP 8.4.0 Alpha 2 available for testing
The PHP team is pleased to announce the second testing release of PHP 8.4.0, Alpha 2. This continues the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0 Alpha 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in th…
Mon, July 8
Improving Laravel Application Security with Aikido
As your Laravel application grows, managing security objectives becomes more challenging, especially for small teams or solo developers. Today, Laravel has teamed up with Aikido to provide a seamless solution for securing your Laravel application. With Aikido, Laravel developers using Forge can effortlessly scan for and identify potential security vulnerabilities, all in less than 1 minute.
Fri, July 5
PHP 8.4.0 Alpha 1 available for testing
The PHP team is pleased to announce the first testing release of PHP 8.4.0, Alpha 1. This starts the PHP 8.4 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.4.0 Alpha 1 please visit the . download page Please carefully test this version and report any issues found using . the bug tracking system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the…