PHP 8.2.35

Code

Issues984 (984)

Pull requests1.2k (1.2k)

Actions

Security and quality66 (66)

Insights

More items

Releases

php-8.2.35

PHP 8.2.35

Compare

Choose a tag to compare

Sorry, something went wrong.

Filter

Loading

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

php-8.2.35

This tag was signed with the committer’s verified signature. The key has expired.

saundefined Sergey Panteleev

GPG key ID: 659A97C9CF2A795A

Expired

Verified

Learn about vigilant mode.

09a9f29

This commit was signed with the committer’s verified signature. The key has expired.

saundefined Sergey Panteleev

GPG key ID: 659A97C9CF2A795A

Expired

Verified

Learn about vigilant mode.

The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encouraged to update immediately.

There are no complete mitigations, updating is the only safe choice. See the security advisory for details.

PHP 8.2 reaches end of life on 31 December 2026 and will receive no further security fixes after that date. Please plan your upgrade to a supported version.

For source downloads of PHP 8.2.35 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

Loading

Uh oh!

There was an error while loading. Please reload this page.