🧰 PHP 8.2

The items that name it 5

• PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
  advisory2026-10-21It is written here as PHP 8.2: affected 8.2.0–8.2.34, first fixed 8.2.35.
• PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
  article2026-10-21It is written here as PHP 8.2 (fixed in 8.2.35; reaches end of life on December 31, 2026).

  fixed in 8.2.35; reaches end of life on December 31, 2026

• Two critical RCEs in PHP core
  advisory2026-10-21It is written here as PHP 8.2: security support ends Dec. 31, 2026.
• PHP 8.2.35
  advisory2026-10-21It is written here as PHP 8.2 (all PHP 8.2 versions before 8.2.35; two critical vulnerabilities that can allow unauthenticated remote code execution).

  all PHP 8.2 versions before 8.2.35; two critical vulnerabilities that can allow unauthenticated remote code execution

• Upcoming Critical PHP Security Release
  advisory2026-10-20It is written here as PHP 8.2 (fixed in security releases 8.2.31, 8.2.32, 8.2.33 and 8.2.34).

  fixed in security releases 8.2.31, 8.2.32, 8.2.33 and 8.2.34