PHP June Security Release

Security release!

PHP 8.5.7 ONLY:

  • URI:
    • Fixed CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference truncation to int in various places). (CVE-2026-44927)
    • Fixed CVE-2026-44928 (In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal). (CVE-2026-44928)

Our Supporters

Tassos gr
codium
OCH
Simplify your web
Joomdonation
Jet Brains

Sorry, this website uses features that your browser doesn't support. Upgrade to a newer version of Firefox, Chrome, Safari, or Edge and you'll be all set.