PHP security scan v1.2.0

Platform guidance release. Adds cPanel/EasyApache 4 release 25.91 guidance, Windows IIS handler inventory, explicit Ubuntu/Windows/container runbooks, and a cPanel guard in --mitigate. CI tests and read-only smoke scans passed on Ubuntu and Windows with Python 3.9 and 3.13. Automatic remediation remains limited to supported native Ubuntu packages; cPanel and Windows are scan-only.

PHP security scan v1.1.1

Polished terminal reports and guided remediation prompts. Adds optional terminal color with NO_COLOR and --no-color support, clearer headings and status, line wrapping for findings, keyboard-only approval instructions, and plain copyable commands.

PHP security scan v1.1.0

Adds opt-in, approval-gated remediation for Ubuntu PHP packages covered by USN-8948-1. Scans remain read-only by default. Mitigation refreshes apt metadata, checks pinned fixed candidates and holds, simulates the targeted transaction, requests approval, verifies installed versions, restarts confirmed services, and rescans. Includes a shell launcher that explains Python setup when Python is unavailable.

PHP security scan v1.0.0

Read-only local assessment for CVE-2026-109618 and CVE-2026-109619. Includes concise guidance, verbose evidence, optional JSON, Ubuntu 24.04 vendor package checks, and local web route correlation.