Back to Changelog
PHP 8.3

v8.3.36

Security Fix Security Release Released October 21, 2026

Updates PHP to 8.3.36, fixing CVE-2026-109618 and CVE-2026-109619.

Bug Fix

1
  • Rebuilt with the same extensions and libraries as the previous package.

Security Fix

1
  • Updates PHP to 8.3.36, the PHP project's October 21, 2026 security release fixing CVE-2026-109618 (remote code execution via out-of-memory handling) and CVE-2026-109619 (remote code execution via stale request state).
See the Demo